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INTRODUCTION 



Just when you thought you had the upper hand on the information 
revolution, you and your workplace are about to be blind-sided by 
what promises to be a momentous change in the way you do busi- 
ness. For years, you’ve lived with promise after promise of the pa- 
perless office. Well, guess what?! Intranets are going to help you 
establish a paperless office — ^for real! 

Using technology that’s getting heavy rotation on the Internet, 
you’ll be able to develop services and applications that your co- 
workers can use to streamline their work routines. From now on, 
you won’t have to shut down your Web browser when your boss 
walks by, as you’ll be using it for your office work. The same thing 
with your FTP and email software. We’ll even talk about how you 
can use your graphics applications to develop stunning and effective 
graphics for your Intranet Web pages. In short, you’ll be using all 
of the tools that you’ve been brandishing on the Internet over 
these last few years to set up your Intranet — a private Internet. 

Well, not all of your Internet software. . .1 haven’t found a legiti- 
mate Intranet use yet for Marathon, but I’m working on it. 

I like to think of an Intranet as a concept, rather than a physical 
mass of network hardware and chattering computers. Your Intranet 
users will utilize services that you’ll develop and nurture. These 
services will grow in scope and sophistication along with your 
growing administrative expertise. No, I like to think of your Intra- 
net as an amorphous information entity that encompasses and en- 
hances the lives of your coworkers. 
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What I Already Know about You 

You probably have some interest in setting up an Intranet in your 
organization. Either your boss has assigned you to set one up, or 
you’ve seen and heard enough about Intranets to have come up 
with the idea yourself. You’ve spent coundess hours surfing the 
Web, have played around with Web servers, and have maybe 
cooked up some HTML. I’m expecdng that you’re familiar with 
some of the Internet buzzwords such as HTML, HTTP, CGI, and 
other hot button items. 

You also probably have a couple of Macintosh computers lying 
around the office that are idly plugged into your building’s local 
area network. You may not even have a local area network, so your 
Macs may be connected by some ancient LocalTalk cables to your 
seven-year old ImageWriter. That’s okay too. In either case, we’ll 
talk about how you can string your existing equipment and coordi- 
nate it with some new hardware to develop the basis for a fast and 
furious Intranet. 

You’ve probably been forced to work with Windows and Unix serv- 
ers for your work- related administration. You’ve always had that 
soft spot in your heart for the Macs, and you’d love to find a way to 
incorporate them into your complement of servers. Your bosses, 
however, scoff at the idea, deriding your Macs as toys, as they 
maintain a death watch on Apple Computer. In this book. I’ll cover 
the many Mac-based solutions that exist for your Intranet needs. 
I’m hoping you’ll gain an appreciation for the power and versatility 
of your Macintosh computers and will learn enough to be able to 
run several of your major Intranet services on your Mac. 

Most importantly, if you’re reading this book, or even just glancing 
through this section in the bookstore. I’m going to take a wild 
guess and say that you’re the type of person who likes to think of 
yourself as slightly ahead of the pack. Maybe you were the first one 
in the office who understood the potential of Mosaic, back when 
the Web was an arcane playground for scientists, engineers, and 
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grad students. You’re the type of pioneer who’s downloading 
Netscape beta versions and has a folder bulging with Netscape 
plug-ins. This type of pioneering spirit is what’s drawing you to the 
Intranet. 

What This Book Is 

This book is a guide to building and maintaining an Intranet with 
your Mac. The information presented in this book comes from 
several years of my experience with both the Macintosh and the 
Internet in general. My experience has been supplemented by 
coundess other users through email and Usenet postings. Like 
many Macintosh Internet enthusiasts, I started out running a crude 
Intranet in my office without really knowing it. 

There are many facets to the creation and administration of an effi- 
cient Intranet. We will cover many of those topics in this book. My 
intention is to present as many topics as possible, so that the book 
will be sufficient enough to give you a head start on setting up a 
Macintosh-based Intranet. 

What This Book Is Not 

This book is not an introduction to the Internet. Many good books 
are out there to introduce you to the terminology used in this 
book. If you’re not familiar with the Internet, it will be somewhat 
more difficult to come to grips with the concept of an Intranet. 
We’ll discuss a lot of Internet terminology in detail here, so previ- 
ous exposure to the medium will be helpful. 

Furthermore, this book is not an introduction to the Macintosh. 
I’m assuming that you’ve used the MacOS enough to understand 
the vagaries of pointing, clicking, and dragging. There are not 
many strict DOS fanatics out there anymore, so chances are that 
you have some experience in window-oriented operating systems. 
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Getting the Most Out of This Book 

This book is presented in a sequential manner that should mirror 
your development as an Intranet administrator. Chapter 1 explains 
the concept of Intranets in some detail. It discusses how people are 
using them, and it will try to spark some creative ideas in you as to 
what sorts of services you can proxide. In Chapter 2, you’ll learn 
about some of the wiring schemes you can use to establish the net- 
work part of your Intranet. You’ll be exposed to some of the net- 
working protocol and hardware buzzwords as well. Chapter 3 
delves into your Mac server options. You’ll learn about some of the 
features that you should look for in the Macintosh computers that 
you’ll use to base your Intranet services. 

Chapters 4 through 9 go into detail about the World Wide Web 
portion of your Intranet and how you can effectively customize this 
feature as your business link to the Internet. This is a good fraction 
of the entire book, but then again, your Intranet Web pages will 
play a hefty role in the services you’ll provide to your users. Chap- 
ter 4 details the use of several popular shareware, freeware, and 
commercial Mac Web servers including WebSTAR, MacHTTP, and 
others. You’ll learn enough in this chapter to get these applications 
up and running in no time. Chapters 5 and 6 deal with tips and 
information you can use to set up effective Intranet Web services. 
Chapter 5 talks about how you can set up a Web management phi- 
losophy, and Chapter 6 deals with some ways that you can present 
your HTML and graphics in a manner that makes your site easy to 
navigate and simple to use. 

Chapters 7 and 8 are two of the most important chapters in this 
book. Chapter 7 deals with the Common Gateway Interface (CGI) 
and how you can write CGI scripts using several popular scripting 
environments under the MacOS. This chapter primarily covers 
AppleScript and Frontier; it also covers other environments such as 
CGI programming languages such as MacPerl, C/C++, and others. 
You’ll also get a quick primer on imagemaps and how you can cre- 
ate them by using inexpensive shareware applications. 

Chapter 8 discusses how you can incorporate databases as well as 
document search engines into your Intranet Web services. It covers 
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a popular database, Butler SQL, and an associated CGI, Tango, 
that you can use to set up queries of your databases via the Web. 
You’ll also look at some options you’ll have to install document 
search engines on your Web pages. The importance of these tools 
to your Intranet users cannot be overstated. Finally, Chapter 9 de- 
tails how you can go beyond HTML and graphics files to incorpo- 
rate newer technologies into your Web pages. We’ll talk about PDF 
files, VRML, and Java. Links are provided in these chapters to 
point you to other more comprehensive resources on these topics. 

Chapters 10 through 14 deal with the non-Web elements of your 
Intranet. Chapter 10 talks about setting up FTP servers in your 
network. Chapter 1 1 covers setting up email and mailing list servers 
in your network. You’ll eventually need to set up a domain name 
server, so we’ll discuss how to do just that in Chapter 12. You may 
want to insulate your network from the Intranet as well as protect 
against accidental tampering from your users; for these reasons, 
we’ll talk about how you can secure your Intranet in Chapter 13. 
The intent in Chapter 14 is to pull all these tools and topics togeth- 
er into a unified manner, detailing the types of Intranet services you 
can provide your users. I’ll give you some rudimentary, but inter- 
disciplinary, examples of possible services you can offer in your 
Intranet. The whole book is summarized in Chapter 15. 

Appendix A introduces the software provided on the CD-ROM 
accompanying this book. Appendix B gives you several tips on how 
to convert or adapt your Intranet capabilities to establish a presence 
on the Internet. Appendix C discusses some of the high-end 
HTML editors, such as Adobe PageMill and the BBEdit HTML 
Tools, that you can use to create your Web pages; we’ll also take a 
look at some of the Netscape HTML extensions that you can incor- 
porate into some of your Web pages. Finally, there is a glossary of 
the more sophisticated terms used in this book. 



Conventions 

I’ve worked hard to make the presentation of this book as homo- 
genous as possible. The material presented here is sophisticated, 
and the last thing you need is a steady onslaught of clip art and 
cartoons solely designed to break up the text (as well as your 
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concentration). However, there are several conventions that I em- 
ploy that should enhance the readability of this book. 



NOTE 






From time to time, I set discussions and factoids apart from the 
flow of the book in special notes. 




Software that’s included on the CD-ROM is denoted with a CD 
icon. 

This symbol ^ has been used to represent program lines that have 
wrapped. 



Very often, I’ll include text from a script, or a snippet of HTML 
code in the middle of the chapter. When I do that. I’ll set it aside in 
a monospaced font like this: 

HTTP/ 1.0 200 OK 

Date: Thursday, 01 -Feb-96 19:15:32 GMT 
Server: MacHTTP 
MIME-version: 1.0 

Last -modified: Friday, 21 -May-96 14:11:08 GMT 



At the end of each chapter, a list of URLs is presented that pertain 
to the material discussed in the chapter. Some of these links are 
included in the midst of the text, but the list at the end of the chap- 
ter is more comprehensive. Look for the bookmark file on this 
book’s CD-ROM. For more information about tliis CD-ROM, see 
Appendix A. 



Let's Keep in Touch 

Intranets are a new and growing phenomenon. The Information 
Age has provided us with almost instant gratification in exchanging 
relevant information. I’d like this book to be no different. I’d be 
interested to see and hear how you implement the tools and tech- 
nologies described in this book. Feel free to contact me with your 
observations, or flames, at tobin@pobox.com. Also, please drop by 
my Web site (http://www.pobox.com/~tobin) to see how I put 
the tools discussed in this book into action. 





CHAPTER 



Intranets — ^The Next Big Thing 

Ready or not, Intranets are coming to a workplace near you. Intra- 
nets are going to profoundly change the way you and many other 
people work and do business. Kissing cousins of the Internet, Intra- 
nets are emerging in the workplace at a wild pace. It’s a mad rush 
as businesses and organizations all over the globe are setting up 
private Intranets to allow employees to collaborate on tasks, ex- 
change email, access databases, and other tasks — all using familiar 
networking technolog}^ customized to their particular needs. Much 
as the desktop computer transformed the workplace in the 1980s, 
Intranets will be transforming die office of the 1990s. 

This book provides information on how you can configure an inex- 
pensive yet highly flexible Intranet for your organization. While 
your Intranet will be based on the Macintosh operating system, you 
won’t be limited to serving all-Mac networks. The beauty of the 
Intranet, as described in this book, lies within its cross-platform 
utility. A lot of the services upon which Intranets are based can 
serve Mac clients as well as Windows, Unix, and OS/2 clients. The 
services discussed in this book are applicable to nearly all the com- 
puters in your organization. 

You’re probably thinking, “This is great! I’ve got to set up an 
Intranet... but what is an Intranet?” Intranets are the hottest item 
in information technolog)^ today. While most of the world has in- 
vested large amounts of resources scrambling to get connected to 
the Internet, some organizations have set up private networks sepa- 
rate from the rest of the world. These private Intranets, as tliey are 
called, are focused entirely on the needs and aftairs of the organiza- 
tion. Safely ensconced from the general Internet community 
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behind secure barriers, these Intranets look very much like tiny 
litde Internets serving hundreds or thousands of people instead of 
millions. Intranets do not have to be located in the same geograph- 
ical location; you may have Intranet users in remote parts of the 
country that enjoy the same services and security as those users at 
your home site. 

Your Intranet will be more than a self-contained network of rout- 
ers, hubs, and other connection hardware. Your Intranet will be 
more of a concept than anything else. Users within your organiza- 
tion may already have network access to internal services or services 
out on the Internet. However, there may not be a coherent theme 
to the services available to members of your group. Sure, it’s great 
to have email and maybe even access to a file server within your 
group, but what if you could enhance and streamline the work that 
people are already doing? What if you could provide services 
through your Intranet that are even above what is available to them 
currently? Your Intranet is less about wiring up computers to talk 
to one another and more about empowering your organization 
with new tools and capabilities beyond what’s currently available. 

The concept of Intranets is not new. People have been sharing data 
and exchanging email for several years now. In fact, many organiza- 
tions conduct business using groupware applications. Groupware 
usually refers to a proprietary application that enables users to ex- 
change data and email as well as collaborate on documents. The 
difference between commercial groupware applications and Intra- 
nets is that until this point, commercial groupware has tended to be 
built upon proprietary protocols and applications. The emphasis of 
Intranets has been the use of the open architecture embodied on 
the Internet, except they are adapted for the specific needs and 
purposes of the organization. TCP/IP-based Intranets are being 
constructed as low-cost alternatives to commercial groupware. 

Intranets use the same tools and technologies as the Internet, but 
are adapted for private use. Many of the services provided by Intra- 
nets rely on the same networking protocols upon which the 
Internet was founded. Some services that major companies have 
provided on their Intranets include the following: 






Chapter 1 Intranets — ^The Next Big Thing 



9 



□ Web forms to allow employees to update personnel informa- 
tion such as vacation balances, health plan preferences, or 
retirement account balances 

□ Databases linked with Web pages to manage internal paper- 
work as well as collaboration on corporate documents 

□ Videoconferences to allow users to communicate in real time 
with users throughout the company or throughout the world 

□ Corporate email service to allow users to exchange messages 
throughout the company or throughout the Internet 

□ Archives of meeting minutes, technical reports, or corporate 
memoranda 

The rapid pace of Intranet construction and acceptance is aided by 
the familiarization of millions of people by the Internet and the 
World Wide Web (WWW) in particular. Within the past few years, 
millions of people have used the Web or similar facilities offered by 
the major online services such as America Online, CompuServe, 
and Prodigy. An Intranet, therefore, requires very litde training for 
the average employee. 

The Emergence of the Intranet 

It’s ironic that corporate America, which resisted the Internet as 
long as possible, is leading the charge to developing private Intra- 
nets. In retrospect, Intranets are a natural progression from the 
Internet for the following two reasons: 

□ Floundering of online transactions. Despite great advances 
in encryption technology, online commerce on the Internet 
has not yet taken hold. As a result, software companies needed 
a new market for which to develop products. 

□ Proliferation of desktop computers. Within the last 10 
years, personal computers have become inexpensive enough to 
permit widespread usage throughout corporate America. Fur- 
thermore, with employees connected to local area networks 
for printing and email, these networks became fertile ground 
for conversion to Intranets. 
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As a result, it is projected that within a few years, sales of software 
and hardware devoted to Intranets will not only outstrip that asso- 
ciated with the Internet, but will outstrip it several times over. We 
have become used to thinking of the Internet as a large system link- 
ing millions of computers together. The indications are that if the 
Intranet concept takes hold, we’ll think of the Internet as a medi- 
um that links together millions of Intranets. 

Groupware versus Intranets 

The idea of using a local area network to foster collaborative efforts 
in the workplace is not new. As mentioned earlier, groupware de- 
scribes the class of software that allows users to exchange email, 
documents, and electronic forms. Most notable in this class is 
IBM’s Lotus Notes application; other commercial groupware appli- 
cations include Novell’s GroupWise and Microsoft’s Exchange. 
Lotus Notes serves millions of users around the world, allowing 
them to collaborate on projects. 

Groupware, like Lotus Notes, is based on a proprietary format. 
Third-party software companies cannot easily extend the function- 
ality of commercial groupware. Furthermore, groupware applica- 
tions often are based on a networking protocol rather than the 
Transmission Control Protocol/Internet Protocol (TCP/IP) used 
by Intranets and on the Internet. 

In contrast to commercial groupware. Intranets are based on open 
Internet protocols such as HTTP, FTP, and SMTP. While commer- 
cial groupware is moving toward TCP/IP, Intranets are built na- 
tively around the protocol. Intranets are being developed around 
the World Wide Web, with programmers customizing pages using 
HTML and CGI scripts. With people already using the Web on a 
daily basis, there is almost no learning curve with Web-based Intra- 
nets. Intranets are truly cross-platform, meaning that scientific, 
technical, and academic users running Unix workstations can par- 
ticipate as well. It costs much less to run an Intranet. Several types 
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of Web browsers are on the market in addition to freeware and 
commercial Web servers. These browsers are no more than $40 per 
desktop and often can be obtained more inexpensively in bulk; 
Microsoft’s Internet Explorer is even distributed free of charge. 
Intranets can be comprised of several different servers and can be 
accessed by any browser adhering to HTML standards. This is in 
direct contrast to commercial groupware applications, which do not 
easily work with other systems. 

Intranets, however, are much less sophisticated than commercial 
groupware systems. Software suites like Lotus Notes and Microsoft 
Exchange are polished products that allow collaborative document 
processing, email, and electronic forms distribution. In contrast, 
Web-based Intranets are almost always homegrown without major 
third-party technical support. For example, if you want your mar- 
keting departments to be able to access a database containing sales 
data through your Intranet, a Web-based interface will need to be 
developed by your internal development staff. This interface will 
likely need to be developed or implemented by a local or out- 
sourced programmer who will be your sole source of technical 
support. 

Commercial groupware also excels in protecting your data. TCP/ 
IP is a very well-understood protocol. This makes for great devel- 
opment opportunities, but is a disadvantage for security reasons. 
While there are proposals for secure TCP/IP layers, such as 
Netscape’s Secure Sockets Layer (SSL), secure Web transactions 
do not enjoy the same level of confidence with users as does 
groupware. 

Furthermore, applications such as Notes are better at allowing col- 
laborative document processing. In this type of endeavor, users can 
work on the same document with each adding revisions to the final 
version. No widespread collaborative solution exists for Intranets at 
this time. 

Table 1. 1 compares the features of groupware and Intranets. 
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Table 1 .1 Commercial Groupware versus Intranets 



Feature 


Commercial 

Groupware 


Intranet 


Protocol 


non-TCP/IP 


TCP/IP 


Architecture 


Proprietary 


Open 


Third-party support 


Limited 


Comprehensive 


Cross-platform 


Mac/Windows 


Mac /Windows/Unix 


Security 


Advanced 


Intermediate 


User base 


3 million 


15-20 million 
(potential) 


Collaborative tools 


Advanced 


Minimal 


Cost/Desktop 


$100-200 


Free-$40 



Intranets offer much of the functionality of commercial groupware 
at a lower cost. However, commercial groupware offers more in the 
way of security and capabilities at this time. 

The Future of Groupware 

The future struggle between commercial groupware and Intranets 
should prove to be interesting (and beneficial to the user) as the 
two sides gradually incorporate one another’s capabilities. Com- 
mercial applications, such as Lotus Notes, with millions of users 
aren’t going away overnight. Microsoft Exchange is being aggres- 
sively marketed by Microsoft as a groupware solution. In fact, IBM 
and Microsoft are developing Web-friendly versions of their group- 
ware applications, allowing them to work better with Web servers 
and browsers. In contrast, Netscape Communications recently 
acquired Collabra, a maker of a groupware application that rivals 
Lotus Notes’ capabilities. Netscape promises more groupware capa- 
bilities in its next version of its Web browser. 

In all likelihood, users will benefit from the struggle between 
Netscape, Microsoft, IBM, Novell, and other vendors. Both group- 
ware and Intranets are converging on the same goal albeit from 
different directions. The end result of this competition will be a 
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scries of inexpensive products that allow full cross-platform collabo- 
rative capabilities. 

Uses for Your Intranet Server 

Your organization spends a great deal of resources disseminating 
information throughout its workforce. An Intranet server can 
streamline the flow of information between personnel using a cen- 
tralized information server. Your Intranet server can be harnessed 
for just this task. 



In-House Documentation Archive 

If your filing system is anything like mine, memoranda vanish with- 
out a trace once they hit your desk. The lucky ones make it to the 
recycling bin; at least they’ve got a chance to see the light of day as 
another memo. The Web makes an ideal platform for use as a docu- 
ment archive; in fact, that was the purpose for which it was original- 
ly designed. 

Nowadays, internal documents are generated on a computer and 
are stored somewhere in electronic form. These documents can be 
stored in a database for access through an FTP or Web browser. In 
this manner, documents can be accessed through an interface be- 
tween the document database and a specially configured Web page. 
If these reports and memoranda were consolidated within a group, 
personnel within that group would have access to the entire hold- 
ings within that database. Later in this book, we’ll talk about how 
such an interface can be implemented. 




For an example of how such an archive was developed for the 
Unix platform, check out the WebLib home page at http:// 
selsvr.stxxom/-weblib 



Your Intranet also can be used to disseminate policy statements and 
administrative news. By establishing a home page on your server 
associated with administrative news, personnel would be able to 
consult this page for policy statements and directives from manage- 
ment. Company newsletters and HelpDesk information could also 
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be posted on this server. In this manner, your organization would 
save a great deal of resources that would be required to print and 
distribute these directives among the workforce. Some alternative 
uses for an internal document server include the following: 

□ Management directives 

□ Organizational newsletter 

□ HelpDesk information 

□ Report and memorandum archive 

□ Searchable employee directories 

□ Organizational charts 

In-House Software Archive 

Large organizations usually standardize on some type of office au- 
tomation software. Sometimes this software is purchased in large 
quantities for the use of employees throughout the organization. 
Rather than allocating valuable HelpDesk resources to install and 
configure the applications on personal computers throughout the 
company, the software could be stored on a centralized FTP server. 
The software would have to be covered under a site license or some 
arrangement that adheres to software licensing agreements. In- 
structions on how to load this software could be accessible through 
a HelpDesk Web page. 



Electronic Mail 

In addition to World Wide Web and FTP services, your Intranet 
can handle the administration of electronic mail throughout your 
organization. You have several commercial and shareware 
Macintosh options for serving email to your users. We’ll discuss 
your email options in Chapter II, “Email Services.” 



Bulletin Boards 

Usenet was one of the earliest services offered on the Internet. It 
enables users from all over the world to post or request information 
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on highly specific topics. Universities, government agencies, and 
large companies often set up local groups in conjunction with the 
public Usenet groups. These local newsgroups pertain to issues 
internal to the organization and exist as a means of information 
dissemination and collaboration to some degree. Setting up a 
Usenet feed to your Intranet is a daunting task. Usenet feeds re- 
quire several gigabytes of storage since megabytes of new postings 
are generated each day. 

You can still set up Web-based bulletin boards that fulfill the same 
function as Usenet groups. There are several shareware and com- 
mercial bulletin board applications at your disposal. Moreover, 
these applications will allow you to customize the output and oper- 
ation of your bulletin boards more completely than a standard 
Usenet client. We’ll talk about Web-based bulletin board software 
in Chapter 14, “Sample Intranet Applications.” 

Videoconferencing 

You probably arc familiar with QuickTime on the Macintosh and 
even Windows. QuickTime is an extension bundled with the 
MacOS that allows you to play movies using a variety of movie 
players. However, you can even use SimpleText to view some types 
of movies. Coupled with Intranet technology and the right equip- 
ment, you can record movies and play them over the Internet. 

With the right software, you can even videoconference between 
workstations. 

Your Intranet can support videoconferencing if both parties have 
the correct (and often inexpensive) equipment such as Connectix’s 
QuickCam or any other Mac-compatible video camera. Provided 
that remote users have the proper equipment and network configu- 
ration, you can even set up videoconferences inside your Intranet 
with employees who arc in different parts of the country. You may 
not experience the full 32 frames per second that you see on televi- 
sion, but videoconferencing is the next best thing to being there. 
See Chapter 14, ‘"Sample Intranet Applications,” for more about 
videoconferencing^. 
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Why the Macintosh? 

ril do my best to avoid a deep excursion into the operating system 
(OS) wars that have pitted PC and Macintosh users against one 
another. However, there’s an interesting similarity between the Mac 
and the World Wide Web; as the Macintosh simplified personal 
computing with a revolutionary graphical interface, the Web offers 
the same friendly face for the Internet. The Mac and the World 
Wide Web have spurred explosive growth in personal computing 
and the Internet. 



NOTE , I won't spend a lot of time telling you why the Macintosh is 

o a better platform than a PC running Windows 95, but 111 let 
Apple tell you. Check out The Macintosh Advantage at http:// 
www.apple.com/whymac/defaulthtml. 



Interestingly, Apple Computer has not benefited from the wild 
expansion of the personal computing market. Estimates of the 
Macintosh computer’s share of the personal computing desktop 
market range from 7-12 percent as of this writing. While that is a 
larger share than that held by DOS or OS/2 machines these days, 
it’s a distant second place to Microsoft’s formidable troika of Win- 
dows 3.1, Windows 95, and Windows NT. There are several expla- 
nations for Microsoft’s dominance of the desktop market, but for a 
desire to avoid another skirmish in the OS holy war, 1 don’t intend 
to discuss them here. 

Holding Its Own on the Net 

The services that you will provide on your Intranet basically arc the 
same serNdccs available on the Internet, but adapted for your own 
internal use. This book will tell you how to develop an Intranet 
using the Mac as a server platform. Even though the number of 
Macintosh computers is far outweighed by PCs running Windows, 
DOS, and OS/2, there arc many Internet server applications writ- 
ten for the Mac. This section will discuss how you can adapt diese 
applications to construct your Intranet. First, look at just how pop- 
ular the Macintosh is as an Internet server platform. 
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According to a recent survey, Unix remains the most popular plat- 
form on which to institute an Internet server. This can be explained 
by the fact that TCP/IP is natively incorporated into the Unix OS. 
However, this survey showed some interesting statistics regarding 
the percentage of World Wide Web sites running under the 
MacOS. The results of this survey, tabulated in Table 1.2, show 
that of all Internet-capable operating systems, the MacOS operates 
the second-largest number of WWW servers. 




The full results of the survey performed by Mir«u, a Chicago con- 
sulting firm, are available at http://www.mirai.com/survey/. Miral 
expects to have results’from an updated survey available in mid- 
1996. 



Table 1 .2 Percentage of WWW Servers by OS (performed by 
Mirai, Oct. 1995) 



Servers 


Percentage 


SunOS 


21.0% 


MacOS 


17.0% 


Solaris 


10.4% 


Windows 


9.7% 


Other Unix 


6.5% 


Windows NT 


4.5% 


HP 


4.1% 


DEC-OSF 


3.8% 


BSD 


3.4% 


AIX 


3.2% 


SGI/IRIX 


3.0% 


Other OS 


2.6% 


OS/2 Warp 


1.1% 


NeXTSTEP 


0.7% 
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Microsoft’s Windows OS is found on 7 to 8 times as many desktop 
machines as the MacOS. Surprisingly, the MacOS runs nearly twice 
as many Web sites as MS Windows. Furthermore, the survey found 
that 40.9 percent of all respondents created World Wide Web site 
graphics using MacOS graphics applications. Windows and Unix 
accounted for 28.4 percent and 25.3 percent of all WWW graphics 
development, respectively. 

Advantages of the MacOS as a WWW 
Server 

Several explanations exist for the Macintosh’s popularity as a World 
Wide Web server. The MacOS networking protocol, AppleTalk, is 
natively built in to the operating system. Although the Mac’s native 
networking protocol, AppleTalk, is not routed along the Internet, 
it was a natural progression for Apple to develop EtherTalk in the 
late 1980s. EtherTalk allowed the Macintosh to use the AppleTalk 
protocol across a much fester Ethernet connection. Apple eventual- 
ly developed MacTCP, which supports the movement of TCP/IP 
packets over the AppleTalk network. 

Ease of Use 

In 1993, the first World Wide Web servers were developed for vari- 
ous flavors of the Unix OS. By that time, Internet applications for 
the Macintosh had several years of heritage. The TCP/IP environ- 
ment was well-defined for the Macintosh. The first Web server for 
the Macintosh, MacHTTP, was introduced shordy thereafter. With 
a double-click of the mouse, MacHTTP could be brought up and 
running. With the MacOS, there is no need to work with processes, 
daemons, and arcane configuration files. In contrast to Unix’s ar- 
cane command-line interface, MacHTTP sports a menu-driven 
interface and a small, but simplc-to-use configuration file. 
MacHTTP had brought simple-to-administer Web service to the 
masses. 

The Frugal Mac 

With the advent of the Power Macintosh in 1994, the performance 
gap between the MacOS platform and the Unix world narrowed. 
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The PowerPC chip running the MacOS is a dcscendent of the mi- 
croprocessor architecture found in IBM’s RS6000 workstation 
series. Moreover, it is much less expensive to operate a Power Mac 
World Wide Web server. A low-end Unix machine can be pur- 
chased for $10,000. Maintenance and configuration costs would be 
much higher than a similarly configured Power Mac. Furthermore, 
you can spend far less for a high-end Power Mac Web server. We 
will discuss the recommended configuration for a Macintosh World 
Wide Web server later in this book. My first Web site ran for several 
years on a Macintosh Ilci powered by a Motorola 68030 processor. 
I only recendy moved the server to a Power Mac. 




As of this wrttihg, Apple's only models for the desktop are con- 
trolled by the PowerPC chip. This class of computers is referred to 
as PowerMacintosh. For the sake of simplicity, ili continue to 
refer to the computer platform as the Macintosh. 



The Secure Mac 

Another advantage of the MacOS over Unix is the inherent security 
built into the operating system. Unix was designed to allow users to 
access systems remotely. Hence, there are ways to compromise its 
security. The MacOS was built as a desktop operating system. The 
file-sharing capability of the Macintosh is crude when compared to 
the Internet’s Telnet capability; however, this lack of sophistication 
is an advantage. There is no way to tunnel into the MacOS using 
another protocol. Wc’ll talk more about securing your Intranet in 
Chapter 13, “Intranet Server Security.” 

Multitasking 

Much is made of the fact that the MacOS is not a true multitasking 
operating system. It’s true that you can run as many applications 
simultaneously as the resources on your Macintosh will allow, but 
the applications are not really running at the same time. Instead, 
the applications are competing for microprocessor time. 

The MacOS is a cooperatively multitasking operating system. The 
main difference between Mac multitasking and true multitasking, as 
used in Unix, Windows NT, and OS/2, is that the MacOS, rather 
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than the applications, is responsible for the bookkeeping required 
to run concurrently. Under the MacOS, applications relinquish 
control themselves and store their operating state themselves. Un- 
der true multitasking, the operating system takes care of these tasks, 
doing a much better job than the individual applications can. As a 
result, applications run much more smoothly under true multitask- 
ing than cooperatively multitasking operating systems. 

Macintosh World Wide Web server administrators claim that a lack 
of preemptive multitasking doesn’t prevent the Mac from remain- 
ing a viable platform for WWW service. They claim that network 
connections are the biggest obstacle to fast Web service. The most 
heavily accessed Web sites, such as Apple Computer’s World Wide 
Web site, enjoy close to 100,000 accesses each day; that’s only 
slightly more than one access per second. A high-speed network 
connection can transmit the HTTP instructions very quickly. The 
Mac conceivably would have enough time to answer the Web 
client request and send the network data on its merry way before 
receiving the next hit. A slower network connection means that the 
Mac frequently entertains simultaneous accesses. There is a definite 
disadvantage to the multithreading environment as opposed to the 
multitasking environment in these high-access cases. Conceivably, 
this problem could be solved through the use of a network of ma- 
chines set up to handle different HTTP requests as Apple has done 
with its Web site. 

When Not to Use a Mac as an Intranet 
Server 

Because the emphasis of this book is the use of the Macintosh as an 
Intranet server, it’s awkward to discuss situations where it may not 
be the optimal server solution. As mentioned previously, Unix is 
designed with inherent preemptive multitasking capability. This 
reduces the chance that a labor-intensive process will clog up the 
processor path. Therefore, systems with tens of thousands of hits 
each day will experience a heavy processing load. If the site is main- 
ly serving small text or graphics files, a high-end Power Mac would 
have no trouble handling that load. 
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However, some Intranet sites are more sophisticated and serve 
more than just text and graphics. More sophisticated sites run ex- 
ternal scripts that generate other Web pages or interact with data- 
bases. The MacOS does not have the same caliber of tools to run 
these scripts as does a Unix workstation. Hence a site that processes 
a lot of external scripts will incur a larger processing load than a 
system that just serves graphics and text. 

There are several ways to run CGI scripts under the MacOS and 
we’ll discuss those later in this book. These scripts cause the server 
to run much slower than if it were simply serving text and graphics. 
A server that expects several tens of thousands of hits per day and 
that is designed to repeatedly execute intricate CGI scripts may not 
be suited for implementation on a single Macintosh. A high-end 
Unix workstation or a network of multiple Mac servers may be 
more suitable for such a heavily accessed server. 

Waiting for Copland 

Transition of the Macintosh user base from the Motorola 680x0 
chip architecture to a platform built around the PowerPC chip was 
painless for many reasons. Apple spent a great deal of time develop- 
ing a PowerPC-based OS that could emulate the chip instructions 
of the 680x0 class of microprocessors. While ensuring backward- 
compatibility, Apple sacrificed performance; the 680x0 emulation 
requires more computational load than if the PowerPC were to 
execute an application written for its own chip instruction set. This 
is true of the MacOS as well; much of the operating system is bor- 
rowed from the 680x0 chip instruction class and is only being emu- 
lated on the PowerPC. This OS emulation has a negative impact on 
system performance. 

Apple plans to release a new operating system in late 1996 that will 
utilize the native PowerPC instruction set. The new MacOS, code- 
named Copland (but also referred to by its probable name System 
8), will also offer several desirable features including true preemp- 
tive multitasking, enhanced multithreading and protected memory 
partitioning (which will help prevent a program crash from bring- 
ing down the system). Many of the disadvantages that server ad- 
ministrators find using the MacOS in comparison with Windows 
NT and Unix should greatly diminish with the introduction of 
Copland. 
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Summary 

My intent in this chapter was to introduce you to the concept of 
Intranets and to give you a feel for their relationship to the Inter- 
net. The concept of Intranets is not new; commercial groupware 
has provided much of communication and collaborative document 
processing offered by Intranets. However, TCP/IP-based Intranets 
are being constructed as low-cost alternatives to commercial 
groupware. 

Furthermore, you saw that there are many advantages to basing 
your Intranet on Macintosh computers. Mac users have been work- 
ing the Internet for years, so a large stable of tools and applications 
exists for the Macintosh. These same tools can be adapted for use 
in your Intranet. The inherent advantages of security, price, and 
ease of use have made the Mac a popular server platform on the 
Internet. This book will tell you how to make this popular Internet 
platform work for your Intranet. 

Chapter 2, “Wiring Your Intranet,” talks about how to construct 
the basic infrastructure of your Intranet. It discusses wiring and 
Internet connection options and how you can provide remote 
access to your Intranet. Feel free, however, to skip past this chapter 
and read one of the following chapters: 

□ Chapter 4, “Macintosh HTTP Servers,” to learn about the 
different software you can use to set up World Wide Web 
services on your Mac. 

□ Chapter 7, “Writing CGI Scripts,” to learn about writing 
scripts for your Web site. These scripts enable you to process 
data from HTML forms and return customized Web pages. 

□ Chapter 8, “Databases and Document Searches,” to learn 
about how to allow your Intranet users a means of accessing 
your databases and searches document archives. 

□ Chapter 9, “Beyond HTML,” to learn some techniques to 
spruce up your Web site beyond just using conventional 
HTML and graphics. We’ll discuss Java, RealAudio, and other 
cool topics. 
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□ Chapter 13, “Intranet Server Security,” to learn how you can 
configure hardware to provide secure transactions within your 
Intranet and out to the Internet. 

□ Chapter 14, “Sample Intranet Applications,” to learn about 
some services you can provide using the Web, FTP, and email 
technologies discussed in this book. 

□ Appendix B, “Establishing an Internet Presence,” to learn 
more about adapting or expanding your Intranet to provide 
services to the Internet. 






CHAPTER 



Wiring Your Intranet 

Before we talk about all the services that you’ll provide on your 
Intranet, we need to talk about the hardware involved in your own 
internal network. To keep from putting the proverbial cart before 
the horse, we’ll need to talk about your Intranet configuration as 
well as the computing hardware that you’ll use to deliver the 
services we discussed in the previous chapter. The following chapter 
discusses the types of Macintosh computers that you’ll be using to 
serve your Intranet. However, this chapter discusses the physical 
setup of your Intranet all the way down to the network connections 
on your users’ desktop computers. 

You may be working for a company or organization diat already has 
an existing network. Your desktop computer may be already wired 
to the Internet, and you can even access a file server or email server 
from your site. This is fine, and it really gives you a leg up on using 
this book. You’ll be able to march on to Chapter 3 and read about 
which Macintosh computers to use for your Intranet servers. 

However, if you are with a smaller organization, or maybe you’d 
just like to learn more of the networking technology that network 
administrators dirow around, this chapter is for you. Tliis chapter 
covers the following topics: 

□ A brief primer on networking hardware and protocols 

□ Some possible wiring schemes for your network 

□ Ways to get connected to the Internet 

□ Providing access to your Intranet from remote sites 
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If you’re like me, you’re pretty comfortable with computers and 
you are undaunted by the concept of networking. However, you 
may not be up on a lot of the current terminology needed to fully 
understand your network. The next few secdons cover the terms 
and buzzwords you’ll need to understand and plan your Intranet’s 
infrastructure. 



Network Protocols 

Information is transferred along networks such as an Intranet in 
packets that are strings of data no more than 500-1500 bytes in 
length. The manner in which they are transferred across a network 
is referred to as a network protocol. Packets are constructed differ- 
ently using different network protocols, but usually they contain 
the desired information encapsulated by a header with data that 
details whether or not the packet arrived intact. Take a look at 
some of the network protocols you can use on your Mac-based 
Intranet. 



TCP/IP 

TCP/IP is a multilayered femily of protocols upon which the Inter- 
net is built. Similarly, many of the services discussed in this book 
are based on TCP/IP. Many services such as FTP, Domain Name 
Service, and email are transmitted using TCP/IP. TCP/IP is com- 
prised of two protocols: Transmission Control Protocol (TCP) and 
the Internet Protocol (IP). However, these two protocols are used 
together so often that you’ll frequently see Intranets referred to as 
TCP/IP-based networks. 

IP 

Network protocols work to move packets across a network. Along 
the Internet, as well as your Intranet, IP defines the structure of 
the data packets that stream between clients and hosts. IP doesn’t 
concern itself with the content of the data inside the packets, but 
is more concerned with providing a means of transporting that 
packet. 
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You’re probably familiar with one aspect of IP, the IP address. Ev- 
ery computer on the Internet maintains an IP address, much like 
every working telephone maintains a phone number. If you’re 
connected to the Internet, you’re probably more familiar with 
your desktop computer’s host name, which is something like 
spanky. dc . anyplace .com . 

In reality, your host is known throughout the Internet using an IP 
address that’s actually a unique numerical address. This address 
consists of four numerical fields: each field consists of a number 
from 0 to 255. Each IP address is associated with an easier- to- 
remember host name. You usually refer to the host names, but your 
computer works with the IP address. Your computer requires the 
use of a domain name server to associate a host name and an IP 
address; this is discussed in detail in Chapter 12, ‘‘Providing Do- 
main Name Service.” 

IP packets, which can contain files or partial files sent by FTP, email 
messages, or Web browser requests, contain two destination IP 
addresses — the packet’s final destination and that of your local 
router, which can further relay the packet to its source. From this 
router, the packets will bounce between other routers until they 
arrive at their destination. Routers are discussed in a later section in 
this chapter. 




If you are sending an IP packet to another computer served on the 
same router as your computer, that router likely will have that 
destination computer's address stored in its table. In this case, the 
two IP addressees In the IP packet will be the same. 



TCP 

Your email message, file transfer, or Web browser request is made 
up of many IP packets. They may arrive at the destination comput- 
er in or out of sequence. They may take different paths between 
your computer and the final destination. Whereas IP doesn’t care 
about the content or nature of the packets, TCP is the mechanism 
that breaks your request into packets, sends them across your Intra- 
net or the Internet, and reassembles them in the correct order. 
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If these IP packets are not received in a proper order, TCP queries 
the sender for the original data until it receives the proper packet. 
Even if it’s waiting for one tardy little packet, which it expected at 
the beginning of the transmission, TCP will allow your computer 
to reassemble the packets into the desired data format. This makes 
TCP/IP a very robust protocol upon which to base your Intranet 
transmissions. Furthermore, basing your Intranet on TCP/IP ser- 
vices allows you to interact more fully with the Internet. 

MacTCP 

Since the late 1980s, Apple has produced an adaptation of the 
TCP/IP layer for the Macintosh. Implemented as a control panel, 
MacTCP offers a means for Mac users to direcdy take advantage of 
TCP/IP services. MacTCP comes bundled with System 7.5; this 
integration of MacTCP and the MacOS allows a seamless interface 
for many TCP/IP applications. This is in contrast to PCs running 
Microsoft Windows, where there are many TCP/IP implementa- 
tions for that operating system. 

AppleTalk 

Much like Unix, the MacOS has an advantage over most operating 
systems in that it utilizes a networking protocol that is native to the 
operating system. This protocol, AppleTalk, is built into the 
MacOS and allows easy printing and file sharing between comput- 
ers. Since the early days of the Macintosh, users have been able to 
print documents simply by connecting cabling between their com- 
puters and a printer. AppleTalk would automatically configure the 
document for processing on the printer and send the requisite in- 
formation to the device. 

AppleTalk is not nearly as robust a network protocol as TCP/IP. 
AppleTalk does a lot of checking to make sure that the receiving 
computer is getting the correct information. The packets are of a 
different format but still are pushed through routers that are spe- 
cially configured for AppleTalk. 
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Whereas TCP checks with the sending host to request wayward 
packets, AppleTalk engenders a great deal of communication be- 
tween the sending and receiving hosts while packets are being 
transmitted. Network protocol specialists refer to AppleTalk as a 
chatty protocol for this reason. The rate at which a network can 
pass packets is known as the network’s bandwidth. Because of 
AppleTalk’s propensity for chatty communications, you won’t see 
the bandwidth out of AppleTalk networks that you see out of 
TCP/IP networks. 

Apple does offer a version of AppleTalk for Windows. Running an 
Intranet solely based on AppleTalk would be possible, but not very 
easy. File sharing and printing would be possible, but much of the 
more powerful Intranet tools, such as Web browsers and FTP cli- 
ents, require TCP/IP. You’ll still use AppleTalk for your file sharing 
and printing, but AppleTalk alone will not serve all of your Intranet 
needs. 

Open Transport 

Open Transport (OT) is a new networking technology that greatly 
enhances Macintosh network services. Although OT I.O was origi- 
nally released in late 1995, it wasn’t until OT 1. 1 came out a few 
months later that the bugs had worked out to a degree that en- 
sured full use of the software for all Macintosh computers. OT will 
allow enhanced networking for Macintosh computers on TCP/IP 
and AppleTalk networks. 

Open Transport supersedes both MacTCP and the AppleTalk soft- 
ware found in System 7.5.2 and earlier. Open Transport is fully 
PowerPC native, so Power Macs will see a networking performance 
boost. Furthermore, OT enables you to reconfigure your IP ad- 
dress on the fly; you can bring up another IP configuration simply 
by selecting an option on a popup menu without having to reboot 
your Mac. Chapter 4, “Macintosh HTTP Servers,” talks more 
about IP streams and the 64-stream limit imposed by MacTCP; OT 
allows you maintain as many IP streams as your microprocessor and 
RAM will allow. 
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Network services found in future versions of the MacOS (Copland 
and beyond) will be based on Open Transport. By the time you 
read this, many Macintosh Intranet server applications will be re- 
configured to take advantage of Open Transport advantages. Run- 
ning OT will present your server with a great deal of advantages. 



Wiring Protocols 

As mentioned previously, you may already have existing wiring in 
your office. You may not be required to string up a series of cables 
to interconnect all your computers. In that case, you’re one lucky 
administrator. However, this section will cover cabling terminology 
that is valuable to administrators with and vidthout existing cable 
systems. 



Ethernet 

Although it’s often, and incorrecdy, referred to as a cabling system, 
Ethernet actually is a standardized cabling and signaling specifica- 
tion and refers to a slew of media and services. You can run many 
protocols over Ethernet including AppleTalk and TCP/IP. You also 
can run these protocols over a variety of wiring types including 
copper coaxial cable, fiber-optic cable, and unshielded twisted-pair 
cabling. 




Apple's implementation of AppleTalk that runs over Ethernet is 
known as EtherTalk. 



Several types of Ethernet cabling systems are available for you to 
use to wire your Intranet. As of this writing, the most common 
scheme is twisted-pair cabling or lOBaseT lOBaseT has ousted 
much of the old 10Base2 or coaxial thin-Ethernet cabling found in 
older local area networks (LAN); 10Base2 looks very much like the 
coaxial cable that leads into your cable TV set. lOBaseT connection 
hardware, such as routers and hubs, which we’ll discuss below, is 
more expensive than 10Base2 but performs better under noisy or 
high-traffic environments. Furthermore, lOBaseT wiring is cheaper 
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than thin-Etlicrnct and requires less skill to install. lOBaseT, to the 
untrained eye, appears very similar to common telephone wiring, 
even down the modular phone jack. Many computers have adapters 
that accept lOBaseT wiring. lOBascT wiring is much lighter and 
easier to work with than thin-Etliernet cabling; network administra- 
tors find it easier to troubleshoot problems on lOBaseT networks 
than on thin-Ethernct systems. 



— ^ 

NOTE . What's behind the name 1 0BaseT? The naming convention for 
'Cr 1 0BaseT, 1 0OBaseT, and other cabling conventions is simple. For 

lOBaseT, the "10" stands for the transmission rate in megabits/sec 
(Mbps). The " Base" means that the cable admits baseband trans- 
missions rather than broadband transmissions. The "T" stands for 
twisted-pair, meaning that 1 0BaseT Ethernet is running over un- 
shielded twisted-pair cabling. Therefore, 1 0OBaseT is similar to 
1 0BaseT except that it transmits data at 1 00 Mbps. 



With lOBascT, you are limited to speeds of 10 Mbps. lOOBa.seT is 
a new Ethernet variant that supports network transmission speeds 
of up to 100 Mbps. Because of some confusion in the standards 
process, there are several competing 100 Mbps Ethernet implemen- 
tations. lOOVG-AnyLAN is a 100 Mbps Ethernet implementation 
that offers some enhancements over 1 OOBaseT, but has little indus- 
try support. 



NOTE 






If you are working in an existing Intranet or LAN, chances are that 
it's based on lOBaseT. You may want to boost the productivity of 
your Intranet by providing 100BaseT. This is not a position to be 
taken lightly, as there's more that's involved than just replacing 
your hardware. All of your ancillary equipment, from your desktop 
computers' network interface cards (NIC) to the connection hard- 
ware behind the scenes, will have to be upgraded to accommo- 
date 1 0OBaseT. You may be able to use your existing wiring, but 
there still is a considerable amount of time and expense associated 
with such a move. 
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Your Ethernet- based Intranet wiring will require more than just 
cabling. We’ll talk about ways to segment your sections of your 
Intranet in the section “Connection Hardware.” 

FDDI 

Fiber Distributed Data Interface (FDDI) is a high-speed net- 
working technology used as an alternative, in some instances, to 
100BaseT. FDDI is almost always transmitted along a fiber-optic 
cable, which provides good signal-to-noise performance, but can be 
implemented along twisted-pair cabling as well. Like 100BaseT, 
you can get 100 Mbps along your FDDI connections; however, 
100BaseT is limited to 250m-long segments, whereas FDDI con- 
nections can be several kilometers in length. Therefore, FDDI lends 
itself to use as a backbone transport mechanism. You can use FDDI 
segments to connect segments of your Intranet to one another. 

On the flip side, FDDI is several times more expensive than 
100BaseT or lOOVG-AnyLAN. Furthermore, it is difficult to in- 
stall. FDDI network cards are still more expensive than 100BaseT 
cards at this point, so running FDDI to the desktop is cosdy. FDDI 
may be supplanted by future technologies, such as ATM one day, 
but currently remains a popular backbone implementation. 

ATM 

Ask a network administrator about ATM and you won’t hear about 
automatic teller machines. Instead, you’ll hear about the Asynchro- 
nous Transfer Mode (ATM), which has been heralded as the next 
big advance in high-speed networking. In contrast to FDDI, ATM 
allows transmission speeds of over 600 Mbps. Furthermore, ATM 
is a scalable architecture, meaning that it can be implemented down 
to the desktop or as a backbone transport mechanism. 

As a disadvantage, ATM is still an evolving architecture and is not 
yet in wide use. ATM connection hardware is more expensive than 
other options, making it more costly to implement as a full Intranet 
solution. 
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Connection Hardware 

Your desktop computers will be connected to a network outlet by 
some network cable. The network outlet is connected to some type 
of connection hardware. This hardware funnels your network traffic 
in and out of your Intranet, and for large Intranets, your hardware 
intelligently routes your traffic to its destination and shields you 
from unwanted traffic. We’ll talk about some of the hardware you’ll 
use to bind your organization’s computers into a full-fledged LAN. 

Routers 

If your Intranet is large, you’ll want to have hardware in place that 
makes intelligent choices about directing your network traffic. For 
example, if you have a user trying to connect to a Web browser in 
one building, that traffic need not be broadcast to users on a net- 
work in another building. Routers, also called gateways, are used 
just for this very purpose. A router can be a regular computer run- 
ning routing software or it could be a dedicated piece of hardware 
that is used only for routing data packets throughout your Intranet. 

Routers maintain tables that they use to check whether they need 
to pass data to another section of your Intranet. Each packet con- 
tains the address of its destination, so routers inspect these address- 
es and send the packets off to the LAN that is closest to that final 
destination. This process is repeated as packets bounce from router 
to router until they arrive at their destination. This method of pack- 
et transfer occurs throughout the Internet and will work the same 
way through large Intranets. 

Routers are improving with time and are posing less and less of a 
performance hindrance to your traffic. Usually network administra- 
tors shield large parts of a LAN behind different routers to insulate 
portions of the network from one another. Router software is im- 
proving in capacity and functionality and can more efficiently direct 
your network traffic to its proper destination. Routers can work 
with different protocols, such as AppleTalk and TCP/IP, providing 
the router software is configured with the appropriate software. 
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Bridges 

A bridge will connect to distinct segments of your network cabling 
and transmit traffic between them. Routers are in effect bridges, 
but standard bridges apply no intelligence to the traffic passing 
through them. You use bridges to extend the length of your net- 
working cable. 100BaseT has a maximum segment length of 250 
meters; you can connect several of these segments together with 
bridges to extend the network over long distances. 

Learning brid£[es are a special form of bridges. Learning bridges 
actually take notice of the hardware address attached to the packets 
transferring between segments. Each device on your Intranet, 
whether it’s a printer, a computer, or a router, maintains a unique 
address, known as a Medium Access Control (MAC) address, asso- 
ciated with the network interface. Network cards have unique 
MAC addresses, as do computers such as Quadras and Power Macs, 
that contain built-in networking hardware. Learning bridges take 
notice of the MAC addresses on either side of the connection and 
record that information for further use. Some packets that are di- 
rected to computers within the bridged segment need not travel 
outside the bridge. A standard bridge would blindly pass the packet 
on and eventually a router would bounce the packet back inside the 
bridge to the destination. A learning bridge would know that the 
source and destination computers are on the segment and would 
not transfer the packet out to the other segment. This prevents 
undue network traffic outside the affected segments. 

Routers and bridges perform essentially the same function but are 
concerned with differentelements of the Ethernet packet. Routers 
are concerned with the destination IP address, whereas bridges are 
concerned with the actual AAAC address. Routers slow traffic 
somewhat, as calculations are made as to where the padtets need 
to be directed. Bridges place fewer restrictions on the packets but 
cannot segregate traffic to remote LANs as routers can. Usually, 
several Ethernet segments are bridged together behind a single 
router. 
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Hubs 

A hub is an amorphous term used to describe a variety of network 
connection hardware. Hubs, also known as concentrators, connect 
several network entities together in a star-like fashion. You can 
hook up routers, bridges, and even cable segments to a hub. The 
hub acts to coordinate the traffic from all of its connections and 
move it out to another portion of the LAN. Conversely, hubs also 
receive traffic and divert it to the proper input port. 



Getting Wired on the Inside 

YouVe read about wiring and hardware that can connect your seg- 
ments together. Now it’s time to put this knowledge together to 
develop a coherent and scalable Intranet architecture. My intent is 
to give you a general feel for how you can deploy your network 
components so as to create a robust and scalable Intranet. I’ll re- 
frain from making any specific recommendations for any make and 
model of any of your networking hardware. 



Wiring Schemes 

In developing a comprehensive wiring scheme, start big and work 
your way down. First, look at your Intranet’s connection to the 
Internet and work your way down to the desktop. The implemen- 
tations discussed in this section are by no means the only way that 
you can institute your Intranet but are more of an illustration at 
how the connection hardware and your cabling can be combined to 
form a usable network. 



Deploying Your Routers 

Depending on the size of your Intranet, you may want to install 
more than one router. If you plan on instituting a firewall or any of 
the security measures mentioned in Chapter 13, ‘‘Intranet Server 
Security,” you’ll need at least one router to regulate traffic in and 
out of your Intranet. This router will filter out traffic that does not 
belong in your Intranet. Similarly, it will direct traffic coming out 
of your Intranet to the proper destination. 
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If your Intranet is small, say 100-200 nodes, you may well be 
served by using only one router. This would suit a small network 
where traffic flows throughout the entire Intranet. However, your 
organization may be large enough that your network could exist 
over several buildings. Some types of traffic, such as email, printing, 
and file sharing, often occurs within a building. You don’t necessar- 
ily want to blast these packets throughout your Intranet, so routing 
according to buildings is a good idea. 

The Backbone's Connected to the. . . 

The function of your Intranet’s backbone is to coordinate and ex- 
pedite your network traffic. This backbone will connect the major 
parts of your Intranet by using a high-speed Ethernet medium. If 
your Intranet lies between several remote sites, such as buildings, 
your backbone will link your building routers into a high-speed 
network. If your small Intranet is served by a single router, you 
can use a high-speed network medium to connect several network 
segments. 

For connections between routers that lie geographically distant, 
FDDI is a good choice for a backbone transport medium. FDDI 
brings fault tolerance and proven technology to your Intranet back- 
bone. You can string FDDI segments that are several kilometers in 
length. Furthermore, stringing fiber optic cable over long distances 
will allow you to avoid many of the performance and reliability 
issues that come with stringing long lengths of copper wiring. You 
can deploy this FDDI backbone as a ring structure. In this way, 
routers have a continuous path to one another and there are fewer 
chances that some anomaly or obstacle will impede your network 
performance. 

If your Intranet is small and only consists of a single router, you can 
still construct a backbone between your hubs. You can connect the 
hubs via a high-speed backbone. Installing FDDI in such a 
geographically contained environment may be cost-prohibitive. 
Therefore, one of the 100 Mbps Ethernet options, such as 
100BaseT, makes an excellent backbone for a small Intranet. 
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NOTE . Your backbone will most likely provide the fastest treinsmission 
o speed within your Intranet. Therefore, it's a good idea to connect 
those machines, which may see a lot of internal Intranet access, 
such as Web and FTP servers, directly to your backbone. If that's 
not possible, these servers should have their own connection to a 
loccil hub. If high-traffic servers are placed on a segment with oth- 
er nominally-used nodes (such as printers or normal desktop com- 
puters), these other nodes, as well as your server, will notice a 
huge performance hit. Providing these servers with an isolated 
high-speed network access will improve their performance. 



Building Bridges 

No mauer what the size of your Intranet may be, you will likely 
need to segment your client desktop computers. A segment is just a 
segregation of geographically contained network hosts. You may 
have 10-20 computers on a segment, which is often referred to as a 
rib. You can wire these segments using 100BaseT cabling. In fact, 
you can even string 100BaseT cabling dowm to the desktop. There 
are many 100BaseT NlCs for Macintosh computers and PCs, and 
100BaseT interfaces come standard with many high-end Unix 
workstations. 

Bridging these segments allows you to overcome the 250 meter 
limit imposed on lOBaseT segments. Advanced bridges, as we dis- 
cussed in the above section, will actually filter out packets that do 
not need to traverse outside of tlie segment. These bridges will 
connect to various hubs deployed throughout your Intranet. 



Deploying Your Hubs 

Like bridges, hubs will play a large part in your Intranet architec- 
ture regardless of the size of your network. For large Intranets, 
you’ll deploy hubs inside your principal routers. If you choose to 
deploy a router for each building, for example, on your network, 
you can install a hub on each floor in your building. These hubs 
receive and disburse traffic from several connected bridges. 
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Smaller Intranets can use hubs to access the 100BaseT backbone. 
You can still use the hubs to distribute traffic throughout your 
backbone. You can even bridge a couple of segments and concen- 
trate those bridges in your hubs. This smaller Intranet model is 
simply a scaled-down version of what we’ve proposed for a larger 
Intranet model. 

Tapping into the Desktop 

To connect your users to the network, you’ll have to provide them 
with NICs. These cards will need to work with the medium that 
you’ve defined on your segment. 100BaseT NICs for PCs and 
Macintosh computers are becoming more prevalent. You’ll need to 
construct segments diat are not crowded with users, but also ad- 
here to the 100BaseT 250 meter limit. These two constraints are 
mutually exclusive and require a great deal of consideration when 
planning your segments. 

Many newer Macintosh computers come with onboard network 
interfaces; you simply purchase a transceiver that works with the 
segment Ethernet medium. You could also circumvent the onboard 
network interface and purchase direct 100BaseT cards that plug 
into NuBus slots on your Mac. 100BaseT NICs that have been 
developed for the new PCI-based Power Macs offer a huge in- 
crease in performance over the standard onboard network 
interface. 

Connecting to the Internet 

Although your Intranet is primarily concerned with the needs of 
your business, you’ll still need to exchange information with the 
outside world. For this reason, you’ll have to have some sort of 
connection to the Internet. This opens a Pandora’s box of con- 
cerns. Security is a major concern, as giving your Intranet access to 
die Internet conversely gives the Internet access to your Intranet. 
Your Intranet security opdons are discussed in Chapter 13, “Intra- 
net Server Security.” You’ll also have to provide a roadmap for your 
users to get out onto the Internet; likewise, you’ll have to direct 
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Internet users to those hosts that you decide to provide access. 
Domain name service is discussed in detail in Chapter 12, ‘‘Provid- 
ing Domain Name Service.” As far as what you plan on publishing 
to the Internet, you can skip to Appendix B, “Establishing an 
Internet Presence.” 

First and foremost, you need to acquire a physical connection to 
the Internet. The popularity of the World Wide Web, online 
services, and the Internet in general has given rise to a wealth of 
options for you to connect to the Internet. Over the past year or 
two, many companies have started to offer Internet access over 
phone links, much like the online services have done for their pro- 
prietary systems for years. These companies, known as Internet 
Server Providers (ISP), provide you with access to the Internet for 
a monthly fee. Let’s look at your options. 

Getting Your Own Connection 

The Internet is comprised of a large number of smaller networks 
combined together over a high-speed backbone. If you need 
high-speed access to the Internet, you may want to tap into this 
backbone. The Internet was initially developed out of the U.S. 
government’s desire to link federal labs with academic institutions. 
Until recently, the U.S. government oversaw the operation of the 
Internet backbone. This responsibility is now divided between sev- 
eral Network Access Providers (NAP). These NAPs tend to be large 
telecommunication companies such as Sprint, MCI, and some of 
the regional Baby Bells. 

T1 orT3 Lines 

You can purchase a TI or T3 line directly from tlie NAP that ad- 
ministers the Internet backbone in your area. This is what ISPs do. 
You can circumvent the ISP and purchase an internet connection 
from a NAP. A TI line is rated at 1.5 Mbps, whereas a T3 line is 
much faster, rated at 45 Mbps. You’ll need to purchase an IP router 
as well as a TI adapter. This TI adapter converts the packets ob- 
tained from the TI line into a format usable on your Intranet. The 
advantage of a TI line is that you pay a fixed fee regardless of the 
traffic volume. However, this cost is in the neighborhood of several 
thousand dollars per year. 






40 



Building and Maintaining an Intranet with the Macintosh 



Fractional T1 Lines 

You can actually purchase a fractional T1 line from a NAP. The 
bandwidth of such a line is rated at roughly 256 Kbps. One advan- 
tage to the fractional T1 approach is that you’ll have the necessary 
equipment in place if you decide to take the plunge and purchase 
full T1 access in the future. The other advantage is that fractional 
T1 is obviously cheaper than normal T1 access. 

Using an Internet Service Provider 

Your other option is to go through an ISP for your Internet access. 
You’ll pay access fees and maybe even usage fees according to the 
traffic volume flowing in and out of your Intranet. You won’t have 
to worry about maintenance and upkeep of Internet connection, 
but you’ll pay dearly for the convenience. 

Conventional Modems 

Many ISPs are configured like the commercial online services. You 
dial the ISP’s phone number over conventional phone lines using a 
14.4 or 28.8 modem. This is an extremely slow way to access the 
network but is definitely your least expensive option. It may be 
incongruous for your Intranet to be based on 100BaseT wiring 
while relying on modems for Internet access; however, this is your 
least complicated option as you need no other hardware, outside of 
your users’ modems, to make the connection. You can even set up 
modems that your users can use over the Intranet as shared devices 
much as printers and file servers are used; keep in mind that these 
shared modems would be serving several people simultaneously, 
thereby fracturing the already slow modem bandwidth. 




The terms 14.4 and 28.8 are used as shorthand for 14i400vand 
28,000 Kbps modems throughout the book. Most 28;8 mpdems 
cJso use compression algorithms, which can effectively boost your 
connection speed under idea! conditionsto 56 Kbps, in realHy. line 
losses and limitations of the phone line will cause you to ayer^ 
out to about 75 percent of your modem's top-speed capa^. 
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One disadvantage of using modems for Internet access is that many 
analysts feel that copper phone wiring is nearing the theoretical 
speed limit of data conversion. You probably won’t see faster mo- 
dems than 28.8 modems in the future. Communication technology 
will likely banish modems to the dustbin of history as new and 
more efficient communications protocols are implemented. 

ISDN 

One technology that shows more promise is the Integrated Services 
Digital Network or ISDN. ISDN goes one step better than modem 
technology. Whereas modems encode and decode data into a for- 
mat suitable for transmission over phone lines, ISDN encodes the 
data into a digital form and transfers it over the conventional phone 
lines. 

ISDN provides a maximum of 128 Kbps, so it for outstrips the ca- 
pabilities of conventional 28.8 modems. ISDN modems exist and 
are being produced in rapid numbers as more ISPs are providing 
the service. However, you’ll pay both an access fee and a usage fee 
for ISDN from most ISPs. Your ISP will charge for the privilege of 
receiving the service and will also charge you by the amount of 
time the connection is active. The telephone companies are begin- 
ning to provide ISDN access at competitive rates, but flat-fee ISDN 
service is rare (where a flat fee is charged regardless of the connec- 
tion time or traffic volume). 

ISDN is a very new service, and like ISPs a few years ago, is the 
scene of intense and aggressive price competition. This is good for 
you, the consumer, as it may not be long before flat-fee ISDN ac- 
cess costs what ISPs charge for 28.8 Kbps access today. 

Colocation 

Yet another option is for your organization to sign on with an ISP 
and locate your server with the ISP. In this way, your server will 
have immediate access to a T1 line or greater. You’ll have to con- 
nect to the servers via FTP (wdth your Web server to test the 
HTML upload) to update your servers. It also would be a little 
sticky to arrange for your users to have access to the server if you 
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set up some type of firewall. With colocated services, you’ll avoid 
any kind of linkage fees that you incur with the other ISP services; 
however, you’ll get charged per megabyte of storage. 

You have a variety of Internet access methods that vary fi'om slow 
and cheap to fast and expensive (see Table 2.1). 



Table 2 . 1 Comparison of Internet Connection Schemes 



Service 


Speed 


Advantage 


Disadvantage 


Modem 


28 Kbps 


Inexpensive 

hardware 


Slow access speeds 


ISDN 


256 Kbps 


Less expensive 
hardware 


Access and usage fees 
still high 


Fractional T1 


256 Kbps 


Allows upgrade 
to T1 


Expensive to install 
and maintain 


T1/T3 


1.5 Mbps/ 
45 Mbps 


Access is directly 
from Internet 


Expensive 


Collocation 


Same as 
ISP 


Cheaper than 
owning T1 line 


Servers must be ad- 
ministered remotely 



Registering Your Nodes 

After you’ve set up your Internet connection, you’ll need to start 
registering your node names with the InterNIC organization. Be- 
fore you even set up your users’ host names, you have to submit 
your proposed domain name. (Domain names are discussed further 
in Chapter 12, “Providing Domain Name Service.”) This chapter 
gives details on how you can register your domain name, as well as 
how the Internet domain hierarchy is organized. For this reason, 
the discussion of node registration is deferred to Chapter 12. 
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NOTE . You can divide your Intranet into subnets. A subnet is a group of 
w machines that are grouped together by function (not necessarily 
geography). You can assign two or three of the four fields in the 
standard IP address. For example, IP addresses on all the comput- 
ers defined in the 128.1 83.250.xxx domain start with the same 
first three fields. You may want to set up different subnets 
throughout different locations in your Intranet. By setting up sub- 
nets, you can improve network hardware performance as well be 
able to restrict Web access to certain subnets (look in Chapter 4, 
"Macintosh HTTP Servers"). 



Provi(ding Remote Access to Your Intranet 

One ser\ice that your users wll find most beneficial is the ability to 
access your Intranet from a remote site. As a result, you’ll need to 
provide the same services away from the office that your Intranet 
users receive in the office. They’ll need to be able to check their 
email, Web-based administrative forms, schedule meetings, and 
download files via FTP. 

SUP and PPP 

I purchased a 12 Kbps modem in 1990 along with my Macintosh 
Ilsi (which with a 20 MHz 68030 chip seemed pretty fast to me at 
the time). In just over five years, the average baud rate of a Mac or 
PC modem has increased over 20 times! While 28.8 Kbps is still a 
far cry from the bandwiddi provided by ISDN or TI lines, it is 
tantalizingly close to giving you the impression that you’re on the 
Internet for real. 

Two protocols allow you to emulate TCP/IP over a conventional 
phone line: Serial Line Internet Protocol (SLIP) and Point-to- 
Point Protocol (PPP). A computer running SLIP or PPP over a 
modem connection needs to be connected to a computer that 
serves those protocols. When connected, the client computer 
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appears to the Internet as just another node, although a very slow 
one. You’ll be able to take advantage of any TCP/IP application 
such as email, Web browsing, FTP, and other services from any 
location w'ith a phone. 

PPP is generally perceived as more reliable than SLIP, although I’ve 
never seen a study that validated this commonly held belief. How- 
ever, PPP is used more heavily than SLIP, by both Windows and 
MacOS users. To serve PPP, you’ll need to procure a specific PPP 
server, such as offered by the Xylogics Remote Annex (http:// 
www.xylogics.com). The Remote Annex machine is specifically 
configured to route protocols such as AppleTalk and TCP/IP over 
phone lines. 

What about Apple Remote Access? Apple Remote Access (ARA) is 
used similarly to PPP, in that ARA users appear as nodes on Apple- 
Talk networks while connected through a phone line. Performing 
tasks on an AppleTalk network is much slower through ARA than 
it is under normal AppleTalk. Earlier in this chapter, we discussed 
the fact that AppleTalk is a much chattier and less efficient proto- 
col than TCP/IP; this becomes painfully obvious when running 
ARA, even over a 28.8 modem. 

Using ARA, you can perform any function that you can over a real 
AppleTalk network. You can mount a remote volume and even 
print a file on a remote printer. However, file sharing is prohibit- 
ively slow over ARA, and a transfer of an equivalently sized file 
takes much less time using FTP than when using ARA. Running a 
remote application such as a word processor or spreadsheet is not 
practical over ARA. 

Using Xylogics Remote Annex server, you can provide ARA service, 
but you need to weigh the burden of administering an additional 
service like ARA over the benefits it would bring to your Intranet. 
With the exception of remote printing, there appears to be few 
advantages of ARA over PPP. 
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Summary 

A great deal of material was covered in this chapter, but you’ll need 
to examine many of the resources listed in the links at the end of 
this chapter for more information on setting up and maintaining 
your network hardware. The intent of this chapter was to expose 
you to the issues you’ll face in building your Intranet from the 
ground up. If you already participate in an existing local area 
network, my hope was to educate you about much of the current 
networking terminology. In either case, networking hardware is a 
rapidly evolving market, and through careful planning, you can 
plan your resources so as to build a robust infrastructure with 
which to develop your Intranet. 

From here, we’re going to spend the next several chapters discuss- 
ing your Intranet Web services. You can of course jump to the fol- 
lowing related chapters in the book: 

□ Chapter 12, ‘‘Providing Domain Name Service,” to learn 
about how Domain Name Service and how you can imple- 
ment a domain name server on a Mac. 

□ Chapter 13, “Intranet Server Security,” to learn how you can 
configure hardware to provide secure transactions within your 
Intranet and out to the Internet. 

□ Appendix B, “Establishing an Internet Presence,” to learn 
more about adapting or expanding your Intranet to provide 
services to the Internet. 



Links Related to This Chapter 

Apple Open Transport http://www.macos.apple.com:80/ 
Home Page macos/safe/network/ 

transportovenhtml 



Mark Sproul’s Open http://msproul.rutgers.edu/ 

Transport Page macintosh/OpenTpt.html 



Xylogics http://www.xylogics.com 

Remote Annex 
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Usenet comp.dcom.modems 

comp .dcom.cabling 
comp.dcom.Ians.ethernet 
comp.protocols.ppp 
comp.sys.mac.hardware 







CHAPTER 




Choosing Your Server Hardware 



With the introduction out of the way, it’s time to talk about the 
hardware upon which you’ll build your Intranet service. The popu- 
larity of the Macintosh as an Internet server platform makes it an 
ideal choice as the foundation of your Intranet. 

One of the criticisms leveled at Apple regards the large number of 
different Macintosh models sold and then discontinued by the 
company. Tliis means, however, that there are a significant number 
of models diat you can use as Intranet servers. The newer machines 
coming out of Apple, on die other hand, sport new technology 
that poses a distinct advantage over the earlier models. 

The following are some of the questions you will face when select- 
ing your killer workstation: 

□ Do you go for an older Mac or a new workstation? 

□ What’s all this business about PCI and Open Transport? 

□ What type of specialized Web servers is Apple offering these 
days? 

□ Should you run Unix on your Mac? 

These topics will be addressed in depth in this chapter. Keep in 
mind that Apple has plans for new computer models in the near 
future (what else is new?). Specific Macintosh models will be dis- 
cussed here, but the intent of this chapter is to introduce you to 
your current and future hardware options and give you enough 
information to make an informed decision about your server. 
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Out-of-the-Box or Off-the-Shelf? 

Any budding Mac WebMaster will talk about how he started using 
MacHTTP on an old SE/30 that he found abandoned on a shelf in 
an old broom closet. My story started some years ago on a lovable 
Macintosh Ilci computer that I used for my word processing and 
general engineering work. It hummed away on my desk serving 
HTML while I did work. I eventually upgraded its RAM and disk 
space and tossed an accelerator card inside. 

My souped-up Macintosh Ilci did a fine job at serving my Web 
page and a 5 -second audio greeting from my daughter. I started 
experimenting with imagemaps, CGI scripting, and even some ru- 
dimentary database work. It wasn’t long before I moved my server 
to a Power Mac running WebSTAR (MacHTTP’s commercial de- 
scendant), which was far more capable of handling the extra work- 
load. 




More about MacHTTF* servers is dis- 

cussed in Chapter 4, ''Macintosh HTTP Servers.” 



Another yarn I spin is about the email system we used in our office. 
Some time ago, we decided to move from a proprietary mail appli- 
cation to a more open system. We moved our new post office to a 
Macintosh Ilci, which ended up serving about 100 users. Keep in 
mind that this is a recent story. This mail server is still humming on 
a six -year-old computer! Granted, that Macintosh Ilci does little 
else but serve email, but imagine running a similar system using an 
old 386-based machine. 

You probably have a similar story to tell. The fact is that even your 
older Macintosh can play a part in your Intranet as low-level 
WWW, FTP, domain name, or mail servers. Having said that, the 
newer Macintosh computers sport many new features that allow 
them to excel as network servers. 

As an Intranet administrator, you’ll want to build a service that is 
robust and, most importantly, inexpensive. If your office has a 
strong Mac presence, chances are that you can incorporate a lot of 
seemingly obsolete models into your service. Your organization 
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may be large enough and your ambitions grand enough that you 
will require the latest and greatest Macintosh computers to run 
your Intranet applications. Your Intranet actually is a combination 
of several different services such as FTP, Web, email, domain name 
service, and others. You may want to emphasize different Intranet 
services in your organization; serving these particular elements will 
require more robust hardware. 

Your decision between using new or used Mac hardware really de- 
pends on the sophistication of your Intranet. There’s a place for 
your older Macintosh II series machines and Quadras, as well as for 
some of the new gee-whiz Power Mac computers. You will most 
likely deploy older machines for some purposes and newer ma- 
chines for more arduous tasks. These issues are discussed in the 
following section. 

Using Older Macintosh Computers 

Newer Macintosh computers, like any other desktop computer, 
simply work and move data faster than older models. However, 
there are instances where you can use your older machines as serv- 
ers within your Intranet. Some of the less computationally intensive 
services offered by your Intranet will be email and domain name 
service. Any of the late-model Macintosh II series would work well 
as an email or domain name server. These services require transfers 
of small amounts of data from a hard drive back out to your Intra- 
net. 

When you start talking about large-scale data transfer, such as with 
FTP and Web servers, you may be better off procuring a newer 
Power Mac. In addition to a more optimized architecture, the pe- 
ripherals associated with the new machines, such as hard drives and 
the onboard Ethernet connection, are simply of a more advanced 
design. Hard drive access time, defined as the amount of time it 
takes for a drive to locate a desired sector on a disk, has decreased 
steadily in recent years as advances in hard drive technology have 
occurred. The 16-bit network cards in older machines are going to 
transfer data more slowly than modern onboard Ethernet connec- 
tions. In addition to working faster than your older models, it’s also 
likely that your newer computers will come equipped with more 
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hard drive space and RAM than your older models, making them 
more useful for storing and serving large amounts of data. 

Even the slower machines will work well as low-level FTP and Web 
servers if you have relegated them to low-level tasks. The MacOS is 
a robust operating system, and the older machines have retained a 
great deal of their utility. The slower processing speed of the older 
Macintosh computers is not an absolutely limiting factor for use as 
Intranet servers. In the following section, the real data transport 
limitations of your computers will be discussed. 



Your Server's Bottleneck 

It’s hard to believe that only a few years ago, Intel and Motorola 
microprocessors ran at 4 to 8 MHz. This is in comparison to the 
150 MHz Pentium and PowerPC processors used by high-end 
computers today. The history of desktop computing to date has 
been dominated by a relendess drive to increase the speeds of these 
chips. If the 1980s were the decade of the CPU, however, the 
1990s promise to be the decade of the network connection. 

All of a sudden, the issue is no longer how fast your processor is, 
but rather how fast your network connection is. Think about it, 
what would you rather be doing? Running Netscape Navigator on a 
Macintosh Ilci with a high-speed fiber connection or a Power Mac 
with a 28.8 modem? 



NOTE 



O 



Personally, I'll take the Ilci. Nowadays, network bandwidth is king. 
The 1980s saw an exponential growth in CPU speed. I feel that 
the 1990s will see a similar growth in network access. At home. 
I've already gone from using a 1 200 baud modem that I pur- 
chased in 1990 to using a 28.8 modem. I have a powerful new 
Power Mac at home running on a 28.8 modem, but it's a lot less 
useful for Net applications than my older and slower Power Mac 
at the office with a fast Ethernet connection. The higher speed 
access by the typical end-use has changed the overall content of 
the Web. I'm never going to knock a computer with a high-speed 
microprocessor, but for Internet and Intranet applications, i'll take 
a slower computer with a faster connection any day. 
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Regardless of whether you’re serving email, Web pages, or any oth- 
er TCP/IP traffic, your true botdeneck is going to be your ability 
to get data in and out of your computer. The processing speed is 
important, but a slow network connection will be the most signifi- 
cant factor affecting your Intranet performance. 

There are two elements to this network connection: your bus speed 
and your network connection. Your microprocessor uses a data bus 
to transfer information to other peripherals such as hard drives, 
network cards, or video cards. To communicate with an Ethernet 
network, the Mac passes data to an Ethernet card in an expansion 
slot. Newer Macintosh computers actually have the Ethernet con- 
nection built into the motherboard. Until recendy, Apple used the 
NuBus standard to communicate to cards in expansion slots. Re- 
cendy, Macintosh computers have been developed to use the Pe- 
ripheral Component Interconnect (PCI) standard to transfer data 
to peripheral cards in expansion slots. The PCI standard supports 
data transfer at faster rates than does NuBus and is an accepted 
standard in the Windows/Intel computer platform. PCI is dis- 
cussed further in the section “The PCI Architecture” later in this 
chapter. 

Your network connection is what allows your Mac to communicate 
with a larger collection of computers. In the old days, Macintosh 
computers used to be grouped together in AppleTalk networks 
using LocalTalk connections. AppleTalk is the MacOS-native net- 
working protocol; you use it to print documents or share files with 
other computers. LocalTalk connections are extremely slow in com- 
parison to Ethernet connections; Ethernet traffic can move up to 
40 times faster than traffic on a LocalTalk network. Therefore, 
many Mac networks have discarded LocalTalk and now use Ether- 
net as a basis for their local area networks, as we discussed in Chap- 
ter 2. You probably could have figured out the naming convention, 
but AppleTalk is referred to as EtherTalk when run over an Ether- 
net network. 

Therefore, both your data bus speeds and your network connection 
are bottlenecks in your Intranet. A fast processor will not help you 
get data in and out of your computer any faster. For Intranet 
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applications that require fast data transfer, maximizing your data 
bus and network connection speeds will result in greater server 
performance. 

This is not to say that processor speed is irrelevant. You may want 
to relegate certain tasks to ancillary computers. You may, for exam- 
ple, want to offload the tasks of executing CGI scripts or database 
queries to a separate computer, leaving a primary computer to serve 
HTML. These ancillary computers will be executing intensive tasks, 
and faster Power Macintosh computers will naturally execute them 
more rapidly. 

Deploying Your Hardware 

Depending on the scope of your Intranet services, your server com- 
plement may be comprised of several different Macintosh comput- 
ers. Another factor in this deployment is the size of your Intranet. 
For a small 1 0-person office, you may be able to fit all the services 
discussed in this book onto one computer. For a large organization, 
consisting of several hundred to a thousand users, you may divide 
your server functions between several computers of varying capabil- 
ities. 

The first thing you’ll need to decide is which services you want to 
provide. These services will likely include the following: 

□ Web-based administrative information, such as database que- 
ries, document collaboration, and bulletin boards 

□ Electronic mail distribution 

□ Document archival through FTP 

□ Domain name service provision to allow your Intranet users 
to talk to the Internet 
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You’ll have to decide which Mac models you want to use for these 
services. You’ll also need to decide, based on your resources, how 
many computers you can spare for this effort. My advice is to think 
big. Plan for twice the computer you think you will need and ex- 
pect to generate twice as much network traffic than you anticipate. 

Your Web services will likely be the centerpiece of your Intranet. If 
at all possible, you’ll want to procure a newer Mac, or Mac clone, 
with the most memory and hard drive space you can afford. If a 
new Mac is out of the question, you need to find the most potent 
Mac in your arsenal for recycling as your main WWW server. The 
types of models you should consider are discussed in the sections 
“The Macintosh Family Tree,” and “Apple Internet Server Solu- 
tions,” later in this chapter. 

Figure 3.1 shows a suggested tree of evolution for your Intranet 
hardware configuration. The progression of server evolution 
marches from left to right as you acquire more resources. If you’re 
just starting out with a small Intranet and not much in the way of 
Sparc change, for example, you can easily set up WWW and email 
servers on two older Macintosh computers. As your Intranet be- 
comes more popular, managers will probably flood you with cash, 
so you can replace the WWW server workstation with a new Power 
Mac or Workgroup Server. Your Intranet may become even more 
popular within the company, so you may get a promotion as well as 
a staff. You may decide to add FTP services and a new Mac on 
which to host them. This can become an even bigger hit; so you 
may become a huge hero in the company. As your budget and staff 
grow, you may decide to provide domain name service allowing 
users to access the Internet; this will enable you to share the HTTP 
load between several Macintosh computers like the big kids do. 
Soon your whole organization may be buzzing about how you’ve 
turned things around with your Intranet, and you’ll chuckle think- 
ing about how you started with just a pair of old Macintosh com- 
puters. 
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Figure 3.1 Tou can add services and model upgrades as your 
Intranet grows and you acquire more resources. 



Macintosh Models Available to You 

This section discusses some of the different types of Macintosh 
computers offered by Apple. Some of the new technology offered 
by Apple is exciting and poses some great benefits for your Intranet 
services. This section discusses some of this new technology while 
also revisiting some of the older types of Macintosh computers that 
you can recycle as Intranet servers. 

The Macintosh Family Tree 

Since its introduction in 1984, the Macintosh has grown and ma- 
tured in performance and reliability. Even though the MacOS looks 
different nowadays, the system works pretty similarly to what was 
on the original Mac. Apple has produced several families of the 
Macintosh in this time span. The models that should interest you 
are outlined as follows: 

□ 68030/68040 machines. Any Macintosh ITclass or Quadra- 
class machine, except for the Macintosh II itself 

□ Power Macintosh computers. Any Mac powered by the 
PowerPC chip series. 
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□ Workgroup Server. A special class of Macintosh designed 
especially to serve documents via AppleTalk or EtherTalk. 

Note that the Performa class of Macintosh computers, which is 
provided primarily through consumer channels and geared to the 
home user market, is not mentioned. As a result, it comes bundled 
with a great deal of software appealing to a home user, but nothing 
especially useful for your Intranet. 

68030/68040 Machines 

The Macintosh IIx was the first Mac based on the Motorola 68030 
chip that was comparable to the Intel 80386 chip. Other 68030- 
based Macintosh computers include the Macintosh Ilex, Ilci, Ilsi, 
Ilfic, and IIvx computers as well as the LC class of Macintosh. The 
faster 68040 chip powers the Quadra and Centris classes of 
Macintosh computers. Apple no longer manufactures computers of 
this class; only Power Macs and other PowerPC-based computers 
(PowerBooks, Workgroup Servers, and so on) are produced at this 
time. However, these older machines can be upgraded with extra 
RAM to be extremely reliable servers. While their performance will 
be markedly below that of newer Power Mac computers, these sys- 
tems can easily run the latest MacOS versions. 




The term 680x0 refers to the chip architecture used on the pre- 
Power A/lac models. Along with the models discussed above, some 
eSOxO-based Macintosh computers inciuded the otlgihai Mac. the 
Macintosh Classic, the SE, SE/30, and the Macintosh II. 



Power Macintosh 

In early 1994, Apple began the transition of the Mac architecture 
from the Motorola 680x0 architecture to an advanced chip known 
as the PowerPC. To ensme backward compatibility with earlier 
Macintosh computers, Apple built a 680x0 emulator into the 
MacOS. When Power Mac computers run software originally de- 
signed for an older Mac, the software is run in a slightly slower 
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emulated mode. Therefore, those commercial and shareware appli- 
cations written specifically for the PowerPC Macs will run much 
faster and seamlessly than their 680x0 equivalents. 

The Power Mac computers will run future versions of the MacOS. 
With several Web and FTP server applications optimized to run on 
the PowerPC chip, the Power Mac is an ideal platform upon which 
to base your Intranet services. 

Apple Internet Server Solutions 

Apple has developed Power Mac computers that are specifically 
designed to operate as high-performance network servers. Known 
as the Apple Internet Server Soludons (AISS), these computers are 
differentiated from Power Macs in their expandability, robustness, 
and bundled software. These extra features cause the AISS ma- 
chines to be more expensive than normal desktop Power Mac com- 
puters. AISS configurations are used to serve many high-traffic Web 
sites. 

Apple Workgroup Servers 

As of this writing, Apple produces three different Apple Workgroup 
Server (AWG) models: the 6150, 8150, and 9150. The models 
continually are updated with fester versions of the PowerPC micro- 
processor. These servers differ fi*om the conventional desktop 
Macintosh computers in the following ways: 

□ AWGs come with larger disk drives than those found in con- 
ventional Power Macs and also contain room for multiple disk 
drives. 

n AWGs come with digital audio tape (DAT) drives and backup 
software to use to safeguard information on your disks. 

□ AWGs come with various network management applications 
that help troubleshoot server problems. 

□ AWGs support data safety, using a system of Redundant Array 
of Independent Disks (RAID). RAID is a means of grouping 
relatively inexpensive drives as a single logical unit to achieve a 
faster and more reliable disk storage system. 
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Like Apple’s newer Power Macs, the AWG PowerPC processors 
reside on upgradeable daughtercards. This means that you can pop 
the microprocessor out of the logic board and replace it with a 
much faster version, thereby protecting your investment in the 
machine. 

AWGs currently are used as high-performance Web sites in many 
locations. At this time, Apple Computer maintains a QuickTime 
VR Web site comprised of a system of three AWG 8150s in tan- 
dem. This system of servers, combined as a “redundant array of in- 
expensive computers,” or RAIC, publishes 3 GBs of data each day. 

AISS Software 

Blindled with the AWG servers, Apple offers a CD-ROM that con- 
tains a great deal of software that you can use to set up your Intra- 
net Web services. This software includes a variety of applications 
including a WWW server, an HTML editor, a domain name server, 
CGI scripting tools. Tango and Butler SQL database applications, 
and other software. The CD-ROM is only available by purchasing 
one of the AWG server models and is not sold separately. Many of 
the applications listed on the AISS CD-ROM are provided as demo 
versions on this book’s CD-ROM. 

Macintosh Clones 

It was not until 1995 that the first Mac clones began to appear. For 
the first time, Apple Computer was no longer the sole source for 
Mac. The most robust and competitive offerings come from Power 
Computing Corp. The reliability and compatibility of these com- 
puters have received high marks from analysts and users. These 
computers cut few corners and fiirthermore appear to offer a lot of 
Mac for the buck. 

Currently, the high-end of Power Computing Mac clones come in 
132 and 150 MHz PowerPC versions. Besides exceptionally quick 
processors, these computers offer several amenities that lend to 
their use as Intranet servers; these amenities include large amounts 
of RAM and hard drive space. The PowerWave series, as the high- 
end computers are known, do not come with the networking tools 
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that accompany the AWGs; instead, these computers are compara- 
ble to the high-end desktop Mac models. However, Power Com- 
puting offers a great deal of flexibility in constructing and selecting 
the various options for your computers. 



Other Hardware Concerns 

The Mac models you choose for your server options will depend on 
your resources. There are some additional consideradons you’ll 
need to keep in mind when selecting and configuring your comput- 
er hardware. 

Buying RAM 

The more applications you run on your machine, the more RAM 
you’ll need to add to your Mac. Most Power Macs come with 8 
MB or 16 MB of RAM. If you expect your servers to see a lot of 
traffic, or if you expect to run multiple servers on die same com- 
puter, load the computer with as much RAM you can afford. RAM 
is rarely a bad investment, as RAM requirements for Mac applica- 
tions have increased with time. It’s a safe bet that as your server 
applications grow in sophistication over the next few years, their 
RAM requirements will grow as well. 



NOTE 






o 



You can install RAM on many Macintosh computer models your- 
self. When doing so, pay close attention to the instructions for 
your computer. Some models require you to install RAM chips 
(also known as Single- and Dual-Inline-Memory-Modules— SIMMS 
and DIMMs) in pairs in certain slots on your Mac's motherboard. 
Power Macs use DIMMs, while older Macintosh computers use 
SIMMs. 



One useful utility used by many Mac owners is Connectix Corp’s 
RAM Doubler. RAM Doubler is a memory management tool that 
allows applications on your Mac to use more RAM than what’s 
physically installed on the computer. 
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When you look at the About this Macintosh option (found under 
the Apple icon at the upper left of your desktop), you see a display 
similar to that shown in figure 3.2. You see a listing of the active 
applications currently running; you can also tell how much RAM is 
allocated to each application and how much RAM is available to 
the application. RAM Doubler effectively doubles the RAM in- 
stalled using SIMMs or DIMMs. 
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available for other 
applications 

RAM not 
used by 
application 



RAM allotted to RAM used by 
each application application 



Figure 3.2 A lot of the B.AM reserved for your applications is not 
available for other applications. Among other memory-saving fea- 
tureSy RAM Doubler distributes unused RAM to other applica- 
tions. 



RAM Doubler does this in the following three ways: 

□ RAM Doubler distributes the RAM unused by the applica- 
tions to other applications that need it. By selecting an appli- 
cation icon and opening the Get Info box (done by pressing 
Command-I), you can reserve a certain amount of RAM for 
the application. Normally, the application doesn’t use all the 
RAM you’ve reserved for it (as seen in figure 3.2). RAM 
Doubler redistributes this RAM to other applications. 

□ Many applications reserve some of their allocated RAM for 
certain tasks such as launching or quitting. RAM Doubler 
compresses and redistributes this RAM to other applications 
as needed. 
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□ As a last resort, RAM Doubler will reserve space on your hard 
drive for virtual memory. You’ll notice a performance hit 
when this happens, as your hard drive will be accessed fre- 
quently in these instances. 

RAM Doubler is compatible with many older Macintosh computers 
as well as the newer models. Check with your individual server ap- 
plications to see if they’re compatible with RAM Doubler. 



Buying Big Enough Hard Drive Space 

Along with RAM, you’ll always need more disk space than you 
think. In addition to RAM requirements, hard drive space required 
for server applications has grown in recent years. Many high-end 
Internet and Intranet administrators combine several hard drives 
into a single unit using RAID technology (which is discussed in the 
section “RAID” later in this chapter). 

Buying Scaleable Machines 

One advantage of the Workgroup Servers discussed earlier is their 
scalability. These machines give you enough space to add peripher- 
als such as hard drives, CD-ROM drives, backup tape drives, and 
other such devices. Using old hardware is nice and inexpensive, but 
be sure that your solutions are scaleable in that you can add mod- 
ern peripherals as needed. The old Macintosh II with the 8-bit 
Ethernet card may not be the best networking solution for you. 

New Macintosh Technology 

The Mac has undergone a radical makeover in the last two years. 
Because of heavy competition from Windows/Intel-based PCs, the 
Mac has become less costly, more powerful, and more laden with 
features than ever before. Some of these new advances will be dis- 
cussed in the following sections. 
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The PCI Architecture 

The expansion slots in the back of your Mac accept cards that pro- 
vide a variety of functions. You can insert a video card, a graphics 
accelerator card, a CPU accelerator card, an internal modem, an 
Ethernet card, or a variety of other cards. Until recently, the slots in 
the back of your Mac accepted cards using the NuBus standard. In 
late 1995, Apple began to build the Macintosh with a different type 
of expansion bus. This standard, the Peripheral Component Inter- 
connect or PCI, is new to the Mac but is actually popular with 
Pentium-based PCs. 

Cards and boards adhering to the PCI standard will deliver higher 
performance at a lower price than those based on the NuBus stan- 
dard. This move to PCI has many graphics and video professionals 
drooling at the thought of using high-end PCI video cards. Fur- 
thermore, as PCI cards are very popular with the larger Intel-based 
PC market, it is hoped that many of these cards will now become 
available, with minor modifications, to the Power Mac. The cross- 
over between these markets remains to be seen, but many of your 
peripherals will take advantage of this new bus standard. 

RAID 

RAID is a means of combining a series of disks into a single con- 
glomerate that acts as a single drive. This enables you to store 
data with more reliability than if you stored your data on a 
similarly sized single hard drive. For example, if you have five I GB 
disks, you have a better chance at recovering your data if one of 
those drives crashes than if you were operating a single 5 GB disk. 
Therefore, for systems where you are storing or publishing large 
amounts of data, RAID is a desirable storage option. Apple RAID 
software is included with the AISS CD-ROM. 

Open Transport 

Open Transport (OT) is Apple’s new PowerPC-native networking 
and communications system for the MacOS. Open Transport 1.0 
was released with the first PCTbased Power Macintosh computers 
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in late 1995; this release gave many users of these Macintosh com- 
puters a lot of trouble, so it wasn’t until OT 1.1 was released a few 
months later that the system came into widespread use. 

Open Transport actually replaces the conventional AppleTalk and 
TCP/IP implementations under the MacOS. Much of this is trans- 
parent from a user’s perspective. As an Intranet administrator, the 
most obvious benefit you will see is the ability to employ more than 
the 64 TCP/IP streams allowed by MacTCP. Think of an IP 
stream as a toll booth. A packet of information has to get in and 
out of your server using an IP stream. The more toll booths you 
have, the shorter your wait to get through. Similarly, the more IP 
streams you have, the more data you can get in and out of your 
server. Under OT, the number of streams you can maintain are 
constrained by your RAM and processor power. 

By the time you read this, most MacOS Internet applications wall 
have OT-compliant versions available. These applications should see 
an improvement over the MacTCP versions. 

Unix on the Macintosh 

There seems to be some strange and mysterious alliance between 
Unix and the MacOS. Despite the arcane command-line driven 
interface behind Unix, many Mac users seem to be conversant wdth 
the operating system. Unix ruled the Internet long before Mac and 
PC users discovered it. Many of the Internet protocols are natively 
supported wdthin Unix. Furthermore, NCSA’s original httpd Web 
server originated under Unix. Many Web and Internet/Intranet 
tools exist under Unix. Now Unix exists on the Mac. 

Running Unix on the Mac has several advantages. For one thing, 
Unix is natively multitasking, meaning that processes can be run 
simultaneously; this allows operations, such as Web services, to be 
greatly enhanced. Until Copland, the next major MacOS release, 
Mac users will have to make do with multithreaded processing. 
Similarly, the MacOS file system has difficulties with large file sys- 
tems; Unix has no such problems. Several flavors of Unix have been 
ported to the Mac, and several Mac Internet servers are actually 
running Unix. 
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Apple Unix 

Apple Unix (A/UX) is the original Unix port to the Mac, courtesy 
of Apple, Apple Unix had a cult following within the Mac commu- 
nity. A result of the PowerPC consortium was that Apple threw its 
weight behind IBM’s Unix implementation, AIX. Apple Unix is no 
longer supported by Apple but is still used as a server platform. 
Apache, the popular freeware alternative to NCSA’s httpd Web 
server, for example, is developed and available under A/UX. 

Apple recently released two new servers. Network Servers 700 and 
900, which actually run a version of AIX with a slight MacOS 
tinge. These servers are geared toward publishing production mar- 
kets, but it will be interesting to see if these machines will be used 
for high-powered WWW servers. 



MachTen 

MachTen from Tenon Intersystems is a commercial port of Unix to 
the Mac. MachTen 4.0 is developed for the PowerPC platform. 
MachTen runs on top of the MacOS so that you can easily alternate 
between the two operating systems. MachTen comes bundled with 
NCSA httpd and other IP tools that support advanced networking 
protocols not yet supported by OT. 



Linux 

Linux has taken the PC world by storm. Linux is a freely distrib- 
uted port of Unix to the Intel PC market. Originally developed by 
a European college student, Linux source code is freely accessible; 
successive versions of the OS have been developed through a group 
effort of the Internet community. As an open system, no one really 
owns Linux, but Apple recendy threw its weight behind a Linux 
port to the Power Mac. This port should be available by the end of 
1996 and will give many Mac users an inexpensive but powerful 
Unix presence. 
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Why Unix? 

Many Mac users have a special attachment to the Mac because of 
the MacOS’s ease-of-use and expanded functionality. This begs the 
question of why Mac users would be interested in running another 
OS on their computers? Until Copland, Unix will be the only way 
that Mac Intranet administrators can beat the MacOS file system 
limitations and lack of multitasking. Furthermore, more WWW 
servers are running on top of Unix than any other operating 
system (the MacOS rates second — ^see the latest survey results at 
http://www.mirai.com/survey). Hence, there are many freely 
accessible Unix tools that you can use on your Intranet. 

Summary 

The Macintosh platform has imdergone huge changes in recent 
years. The next few years promise to be even more transitional, as 
the wild ride of the Internet/Intranet will continue to drive soft- 
ware and hardware development. You will need to keep abreast of 
the different developments in the Mac hardware field in order to 
keep your Intranet services as flexible as possible. 

For the next few chapters, we are going to discuss some of the soft- 
ware that you’ll use to construct your Intranet services. Chapter 4 
discusses “Macintosh HTTP Servers,” but feel free to jump to any 
of the following related chapters: 

□ Chapter 13, “Intranet Server Security,” to learn how you can 
configure hardware to provide secure transactions within your 
Intranet and out to the Internet. 

□ Chapter 14, “Sample Intranet Applications,” to learn about 
some services you can provide using the Web, FTP, and email 
technologies discussed in this book. 

□ Appendix B, “Establishing an Internet Presence,” to learn 
more about adapting or expanding your Intranet to provide 
services to the Internet. 
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Links Related to This Chapter 


Connectix Corp 


http:/ /www.connectix.com 


Apple Internet Server 
Solution FAQ 


http://www.solutions.com 

/AISS-FAQ/AISS_FAQ.html 


QuickTime VR 


http ://qtvr. quicktime . apple .com 


Power Computing 


http://www.powercc.com 


Tenon Intersystems 


http://www.tenon.com 


Linux for Power Macintosh 


http ://www. mklinux .apple .com/ 


WWW Server Survey 


http ://www.mirai .com/survey 
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Macintosh HTTP Servers 



It was shortly after the introduction of Mosaic in late 1993 that 
Chuck Shotton developed and released MacHTTP. At that time, 
MacHTTP was a freeware port of the commonly used Unix HTTP 
server from the NCSA. It enabled a Macintosh with a reasonably 
fast network connection to serve HTML files and graphics. Like 
most Macintosh applications, MacHTTP was simple to launch, 
configure, and maintain. A few clicks of the mouse, and you were 
off ser\ing Web pages. 

There is a good chance that your Web service will be the most visi- 
ble part of your Intranet presence. If your organization is connect- 
ed to die Internet, most of your users not only have access to Web 
browsers, but also have experience with diem as well. You’ll include 
FTP and email services within your Intranet suite of capabilities, 
but your Web services will most likely be the cornerstone of your 
service. Great care must be taken in the configuration and opera- 
tion of your Web server software. The servers discussed in this 
chapter go way beyond the power and performance of the original 
MacHTTP application. We will discuss some of die options you 
have for the Intranet Web service including the following: 

□ An overview of the HyperText Transport Protocol 

□ Installation and configuration of MacHTTP 

□ Installation and configuration of WebSTAR 

□ Installation and configuration of InterServer Publisher 
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□ Use of some shareware and freeware HTTP servers 

□ A contrast and comparison of the available server options 



Introducing Terms and Technology 

Before discussing implementation and use of the various HTTP 
servers for the Mac, let’s cover some of the terms and technology 
that are used in this book. Although the servers mentioned here 
offer plug-and-play operation, to fully configure and utilize your 
server to its full potential, you’ll need to understand some of the 
basic nomenclature. 

This is where the book gets a little dry. Page after page of software 
description can get a little... well, boring. However, these descrip- 
tions are necessary to understand the workings of the program. My 
intent is to make the documentation task-driven rather than 
feature-driven. When you read software documentation, notice that 
the literature steps you right across the menu bar, spitting out a 
paragraph on each menu. That’s good for reference material, but 
the approach in this chapter, as well as the rest of the book, is to 
teach you how to work the various tasks, like adding users or set- 
ting privileges. It’s my sincere hope that this chapter, as well as the 
following chapters, will be more informative than if you were just 
to plow through your software documentation. 



HyperText Transport Protocol 

HyperText Transport Protocol (HTTP) is the most common meth- 
od of transporting data between Web browsers and clients. The 
protocol was developed in 1989 for the purpose of transporting 
documents along the Internet via a hypertext interface. In contrast 
to FTP, an HTTP connection between computers requires few 
resources. The protocol was designed to nimbly recover text and 
other data from HTTP servers with very little overhead required 
from the browser or server computers. 

The HTTP specifications undergo periodic review by a committee 
of Internet specialists. As with most committees, these specialists 
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take a great deal of time and care before approving new sets of 
standards. The current standard is HTTP/1.0, which supersedes 
the original HTTP/0.9. Further versions of HTTP are under re- 
view; they will provide greater capabilities to Web browsers in the 
areas of performance and security. 

An HTTP connection between a Web client and server can be sepa- 
rated into four separate actions: 

□ Connection launch. The HTTP server constandy listens on a 
certain IP port for a request from a Web browser. This port 
usually is specified as port 80, but nonstandard ports can be 
included in the URL. 

□ Client request. After a connection is established, the browser 
sends a request to the server. In addidon to querying the 
server regarding a CGI script, or a certain image, sound, or 
HTML file, the browser sends a litde information about itself 
(mainly the type of file formats it can understand). 

□ Server response. The server, having digested the request 
from the browser, sends an HTTP message to the browser. 
The server communicates to the browser the following infor- 
mation: the level of HTTP being supported, the format used 
to convey the response, and the response itself. 

□ Connection close. Having sent the message, the connection 
is terminated by either the client or server. 

NOTe'^^ An Internet Protocol (IP) port is a channel through which informa- 
O , tion enters and exits yourcomputer. Think of IP ports as channels 
on a CB radio; your radio can send and receive conversations oh 
multiple channels on the same radio. Your computer contains 
many IP ports thatare implementedin software rather than hard- 
ware. Different typesof IP traffic (HTTP, Usenet, email, ^and so on) 
are directed to different ports on your computer. 
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NOTE Depending on your security arrangement, which we’ll discuss in 

w Chapter13, "IntranetServerSecurity," you may want to direct 
your Intranet Web services to a nonstandard IP port, that is, a 
port other than 80. You may want to assign your Web server to a 
port that is higher than that used by normal IP traffic such as 
8080. In this way, if Internet users have access to your server, they 
will not immediately be able to access your Web site. 



As opposed to FTP or Telnet connections, the HTTP connection 
does not stay open. As a result, a server can maintain many more 
HTTP connections for a given lengtli of time than it can support 
remote logins. 



NOTE 






For more specific information on HTTP, visit the World Wide Web 
Consortium HTTP draft specification at http://www.w3.org/ 
hypertext/WWW/Protocols/HTTP/HTTP2.html. 



MIME 

The Multimedia Internet Mail Exchange (MIME) message repre- 
sentation protocol is a means of conveying information about a file 
that is being sent through the Internet. This protocol conveys in- 
formation about the message through MIME headers but leaves 
the message content or body in the form of plain ASCII text. For 
this reason, MIME is an excellent means of transferring files be- 
tween different platforms. For example, you can use the email pro- 
gram Eudora to send a graphics file from your Mac to a PC user. If 
the PC user also is running Eudora, or any other MIME-capable 
mail reader, the program will read the MIME header and attach 
the relevant tag to the file to make it readable by the correct 
application. 

Much like HTTP, MIME content headers are under a standards 
process. The key information in die header is the MIME type and 
subtype that idendfy the type of message content. The MIME type 
usually wall consist of one of the types listed in Table 4.1. 
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Table 4.1 


Common MIME Types 


Type 


Column 


Application 


Defines client applications 


Audio 


Defines audio formats 


Image 


Defines image formats 


Message 


Used for electronic mail messages 


Multipart 


Used for transmission with multiple parts 


Text 


Defines text formats 


Video 


Defines video formats 


X-string 


Denotes an experimental MIME type not recognized 
as a standard 



The content header is comprised of a type and subtype. The sub- 
type specifically defines the message content within the context of 
the MIME type. An HTTP server, for example, \vill send the fol- 
lowing MIME type/subtype in response to a Web client query: 

text/html 

This header information tells the browser to expect some text, and 
specifically, some HTML text. Web browsers, as opposed to other 
applications, understand that MIME types need to be interpreted as 
HTML and displayed accordingly. Similarly, a MIME header con- 
taining the information 

image/gif 

would tell the browser the following ASCII text actually is a GIF 
image. The browser then displays the GIF within the window or 
launches a GIF-viewing application. 

A variety of MIME subtypes are defined for each type. The HTTP 
server needs to correlate the type of information it’s serving to a 
certain MIME type. If it’s serving a JPEG file as part of a Web 
page, for example, it needs to know that 
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□ The file is a JPEG formatted-file 

□ Image/JPEG is the standard MIME classification for that file 

The Web server needs to have some means of identifying files and 
the relevant MIME types in order to tell the browsers what to ex- 
pect. How to do this for the various server applications is covered 
later in this chapter. 



What You'll Need 

You’re going to be investing a lot of time in developing a server 
that other people will depend on you to maintain. For that reason, 
you’ll need to stay abreast of die latest MacOS system software 
developments. The software in this chapter requires at least System 
7.0. There are strong advantages, however, to maintaining the most 
recent system software version. We discussed your options for con- 
figuring your Mac hardware in Chapter 3, “Choosing Your Server 
Hardware,” but it is assumed that you have at least 8 MB of RAM 
(16 MB is preferable) and sufficient hard drive space to contain the 
various applications as well as the files that you want to serve. 




Some of the software on this CD-ROM is either shareware or a 
demonstration version of a commercial application. Purchase of 
this book does not fulfill your shareware obligations. 



NOTE The latest Apple System Software updates are available at the 

^ Apple WWW site at http://www.support.apple.com/wwwdocs/ 

apple_sw_updates.html. 

Just as important, you’ll need to have remote access to your organi- 
zation LAN as discussed in Chapter 2; it is assumed that you at 
least have access to MacTCP 2.0.6. Open Transport is a follow-on 
application to MacTCP, which, at the time of this writing, has just 
been released for most Mac models. Although some of the software 
in this chapter will run under Open Transport, it is not yet a re- 
quired element for running your Web server application. 
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Drag-and-drop refers to the feature enabling you to open files by 
dragging them onto application icons or aliases. I sometimes 
launch a local session of Netscape Navigator by dragging a copy 
of an HTML file on top of it. Navigator displays the file upon 
launching. 



Several of the applications in this chapter work with AppleScript, 
which is Apple’s own MacOS scripting language. Using Apple- 
Script, you can create and run small applications using the Apple- 
Script language. This language is easy to understand and implement 
into AppleScript executable files. 




A friend of mine was convinced that System 7 is a nefarious plot 
by Apple to make users purchase more RAM and faster Macintosh 
computers. Similarly, you may be asking why you should upgrade 
to 7.5 because the earlier System 7 versions are free. With System 
7.5 you get AppleScript and MacTCP bundled free. You also get 
drag-and-drop and a scriptable Finder all for less than $99. The 
scriptable Finder is useful as it enables you to build scripts by hav- 
ing the Script Editor record your work. Your PC friends will likely 
have to accumulate similar applications from various sources, 
whereas you have a slew of relevant tools just bundled with your 
operating system. 




Apple maintains several mailing lists related to authoring 
and providing Internet services. Check out http:// 
www.solutions.apple.com/apple-intemet/ for the mailing list 
home page. 



Using MacHTTP 

MacHTTP is die granddaddy of all Mac Web servers. It’s one big 
reason why the Mac has such a large presence among Web servers 
on the Internet. Its simple installation, configuration, and mainte- 
nance have won the praise of many Internet enthusiasts inside and 
outside the Macintosh community. 
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NOTE . MacHTTP is not found on this server but is available at the URL 

W listed at the end of the chapter. It also is distributed at the major 

FTP archives. 



Requirements 

MacHTTP 2.2 requirc.s System 7 and MacTCP. You’ll need Apple- 
Script to allow MacHTTP to support such advanced features as 
searchable documents and imagemaps. AppleScript comes with 
System 7.5 and later. Don’t worry if you’re not running System 7.5 
because MacHTTP comes bundled with AppleScript. The applica- 
tion requires only 600 KB of BAM and under 2 MB of disk space. 
MacHTTP 2.2 comes as a fat binary. MacHTTP is a shareware 
application; consult the MacHTTP documentation for instructions 
on how to pay your shareware fee. 




When an application is described as a fat binary it means that it 
will run on either a Power Mac or a normal 680x0-based Mac 
(also nicknamed 68K-based Mac). All Macintosh models before 
the Power Mac were based on a Motorola 68000-based micro- 
processor. The original Macintosh used a 68000 comparable to 
Intel's 8086. The Macintosh il came out in 1987 based on the 
68020 chip. Later Macintosh lls were based on the 68030 chip, 
and the Quadra and Centris models were based on the 68040, 
roughly equivalent to the Intel 486 chip. The PowerPC chip, which 
runs the Power Mac platform, uses a markedly different chip in- 
struction set. However, it can run applications written for older 
Macintosh computers under a slower emulation mode. A fat bina- 
ry file contains code that will run on the older Mac as well as a 
Power Mac. As a result, the file is slightly larger than either a 
straight 68K-based or Power Mac-based version. 



Installing MacHTTP 




MacHTTP is included on the CD-ROM that comes with this book, 
locate the folder entitled MacHTTP Software & Docs and drag it 
to your hard drive. Double-click the MacHTTP 2.2 application and 
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you’ve just started publisliing on the Web. As long as the software 
is running, you will be able to serve documents. 

Test the server by determining at what address your MacHTTP 
server is publishing. If your server IP address is www.anyplace.com, 
then the server’s default URL is http://www.an}^lace.com. A 
browser seeking that URL will key in on the directory where 
MacHTTP is located and running. For example, if a browser 
requests the following URL: 

http : / /WWW. anyplace . com/ images /logo . gif 

your MacHTTP server will look in its own folder for a folder enti- 
ded Images. In this Images folder, it will look to publish a file 
called logo.gif Note that you do not reference anything relative to 
the Mac’s root folder. You will want to avoid spaces and other Mac- 
unique characters in your file folder names whenever possible. 



NOTE ^ 



You can test the server by entering the server’s default URL into 
your browser. To fully test your system, run the browser on a re- 
mote computer; in this way, you can test MacHTTP as well as your 
network connection. If you have your network configured correct- 
ly, the MacHTTP default page will appear in your browser. 



One useful feature of Mac Web servers is that they do not provide 
access to areas on your server outside the served folder. If you 
keep MacHTTP in a certain folder, for example, users cannot ac- 
cess any information or files outside that folder. 






Like other applications used to provide your Intranet services, you 
may want to add an alieis of the MacHTTP application into the 
Startup Items folder of your System folder. Whenever your com- 
puter is restarted, this application will be one of the first to 
launch. 



If you arc running System 7 earlier than System 7.5, or do not have 
AppleScript installed, you will need to install it to do some of the 
CGI exercises discussed in Chapter 7, “Writing CGI Scripts.” Like 
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installation of any other System extensions, you drag the contents 
of Apple’s Scripting System to the location specified by the folder 
names. If you are running a Power Mac, copy the contents of both 
folders to the Extensions folder inside your System folder. The 
Scripting Additions folder needs to be copied to the Extensions 
folder. Similarly, the MacTCP folder contains the MacTCP control 
panel that should be installed in the Control Panels folder in your 
System Folder, if you have not done so already. 



NOTE . To reduce clutter in your MacHTTP folder, move some of the ex- 
w traneous folders out to another location. First, go into the Tutori- 
als folder and remove the Extending MacHTTP Scripts and bring it 
into the same folder as MacHTTP. Rename this folder Scripts. 
Move the Documentation folder and the remainder of the Tutori- 
als folder to a location where they can be referred to later. Your 
MacHTTP folder now contains the application, associated files, an 
Images folder, and a Scripts folder. When you start adding images 
and CGI scripts, you can neatly store them in the appropriate 
folders. 



Configuring MacHTTP 

MacHTTP configuration is managed by editing the 
MacHTTP.config file in the MacHTTP Software & Docs folder. 
Some of the configurations listed here are duplicated by menu op- 
tions within MacHTTP, but those are covered later. You can edit 
this file in SimpleText or any text editor. Several keywords are in 
tills file that you can modify to configure MacHTTP service. These 
keywords are described in Table 4.2. 



NOTE 






If you edit MacHTTP.config using SimpleText, the MacHTTP key- 
words appear in boldface type. 
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Table 4.2 MacHlTP Configuration Keywords 



Keyword 


Description 

(Default value in parentheses) 


VERSION 


MacHTTP version number (2.2) 


DEFAULT 


Defeult MIME type (text/html) 


INDEX 


Default home page location 
(Defeult.html) 


ERROR 


Default error page location (Error.html) 


NOACCESS 


Defeult location of security error page 
(Noaccess.html) 


LOG 


Name of MacHTTP log file 
(MacHTTRlog) 


TIMEOUT 


Length of time until inactive connections 
time out (60) 


MAXUSERS 


Limit on maximum number of concur- 
rent users (10) 


MAXLISTENS 


Limit on maximum number of precon- 
nection Listens (10) 


PORT 


HTTP communication port (80) 


PIG_DELAY 


Number of ticks (1/60 sec) that 
MacHTTP gives top priority to 
MacHTTP request response (30) 


DUMP_BUF_SIZE 


Maximum number of bytes into which 
file transfers are divided (4096) 


NO_DNS 


Toggles DNS lookups (Commented out) 


SufHx Mappings 


Used to link MIME headers with MacOS 
file types 


REALM 


Means of localizing server access 


DENY/ALLOW 


Restrict or enable server access by IP 
address 
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Default File Locations 

When a browser successfully contacts a MacHTTP server, similar to 
any other server, it gets one of the following four pages in response: 

□ The desired page 

n The default page for that directory 

□ An error page when the URL is incorrect 

□ A message denoting a lack of access privileges 

You can set up these pages several ways by entering their locations 
within MacHTTP.config. The keywords for these pages are listed in 
Table 4.2. The files can exist anyplace inside the MacHTTP folder 
providing you enter the folder path correctly. The INDEX keyword 
is used to enable someone to enter a URL such as 

http : / /WWW. anyplace . com 

and have it access 

http : / /WWW. anyplace . com/ Default . html 
depending on which default HTML file is specified. 



— ^ 

NOTE .. The message files in MacHTTP.config do not have to be HTML 

o files. You can display images, or even CGI scripts, or any other 

type of file as long as you've entered the correct suffix mapping in 
the configuration file. 



NOTE 






The DEFAULT keyword must describe a file name, not a path 
name like the other file keywords. MacHTTP does not index direc- 
tories as other HTTP servers do. Directory indexing occurs when 
you supply a URL of a directory with no file name appended; with 
the CERN and NCSA servers, you then have access to the entire 
folder and enclosed folders. You may or may not want this to 
happen. Chuck Shotton, MacHTTP’s author, felt that this was a 
huge security risk, and therefore it is not supported by MacHTTP. 
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The MacOSdoes not natively support case sensitivity. Requesting 
the file lmage.gif is the same as requesting the file IMAGE.CIF. 
The same is true of MacHTTP service as well. 



Configuring Connection Limitations 

You can specify certain parameters that customize MacHTTP’s 
connection characteristics. In Table 4.2, we see the TIMEOUT 
keyword is used to specify the amount of time that an HTTP con- 
nection stays open. At the beginning of this chapter, we talked 
about how HTTP is designed to be a nimble protocol that main- 
tains short connections. If for some reason, a client request connec- 
tion stays open, you can terminate it after a set amount of time; the 
default value is one minute. 

The maximum number of users and listens on your server is set by 
the MAXUSERS and MAXLISTENS keywords. A user is defined as 
a client with an open connection to your server. In contrast, the 
server listens for requests from other browsers. With MacTCP, you 
are limited to 64 connections of which MacHTTP can claim as 
many as 48. These 48 IP connections are divided into actual re- 
quests and listens that are Requests for Requests. By setting the 
MAXUSERS keyword to a high value, you are doing two things. 
First, because MacHTTP can process only one request at a time, a 
large number of users results in frustrating delays for the other us- 
ers. Secondly, you theoretically restrict MacHTTP’s capability to 
listen for other connections. MAXUSERS and MAXLISTENS are 
restricted between 3 and 48, but default to 8 users and 5 listens 
respectively. 



NOTE ^ In March 1996, Apple released System 7.5.3, which contains a 
O new networking transport mechanism known as Open Transport 
(OT). OT is the modem networking and communications sub- 
^stem for the MacOScmd replaces earlier versions of AppleTalk 
and MacTGP. Useful features that OT gives TCP/IP users include a 
removal of the limit on consecutive IP streams. The number of 



continues 
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streams available to your Macintosh will be limited by the micro- 
processor speed and available RAM. Furthermore, you will be able 
to change your IP configuration (such as IP address) on-the-fly 
without having to reboot your computer. 



You can configure the IP port on which MacHTTP listens for con- 
nections using the PORT keyword. By Internet convention, HTTP 
is allotted to port 80, which is the MacHTTP default. However, 
you can run multiple MacHTTP servers on your Macintosh by 
having the different applications run on different IP ports. By con- 
vention, common IP services utilize ports under 1024, so it’s rec- 
ommended that you configure the PORT keyword to something 
greater than 1024. 



Configuring for Performance 

You can modify several parameters to configure MacHTTP’s per- 
formance. PIG_DELAY is a means of determining how much time 
MacHTTP will spend processing requests at the expense of other 
processes on your Macintosh. This parameter is required, because 
the MacOS is a cooperative multitasking, rather than a preemptive- 
ly multitasking, operating system. PIG_DELAY defaults to 30 ticks 
(where a tick is equivalent to 1/60 of a second). You can set this as 
high as 120 at the expense of your other applications. 

By breaking up the response into smaller file partitions, MacHTTP 
can swap slow connections with fast connections, freeing up the 
faster connections. By setting the parameter DUMP_BUF_SIZE 
accordingly, you can tell MacTCP the maximum size into which 
you want to divide a response. The default is 4096 bytes, but you 
can set the block size as low as 256 or as high as 10240 bytes. 

When we talk about how MacHTTP logs connections, you’ll see 
that MacHTTP lists the mnemonic IP address, as opposed to the 
numerical address, when it can get them. If you’re really committed 
to getting the actual mnemonic IP address, you can tell MacHTTP 
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to look up numerical IP addresses. If so, leave the NO_DNS com- 
mented out. There is a performance penalty in having MacHTTP 
look up the host names, and you can always look up the host name 
later. We’ll talk more about domain name service in Chapter 12, 
‘‘Providing Domain Name Service.” 



Suffix Mapping 

To construct a MIME header to inform the Web browser what sort 
of files are included in the response, MacHTTP needs some means 
of mapping the Mac file type to a certain MIME type and subtype. 
This is done using the suffix mapping within MacHTTP.config. 

The suffix mapping syntax is 

<transfer type><suffix><Mac file type><MacOS Creator 
CodexMlME Type/Subtype> 

The transfer type tells MacHTTP what type of file is being mapped. 
The options include TEXT, BINARY, SCRIPT, CGI, and ACGI. 
ACGI stands for Asynchronous CGI, which is discussed in Chapter 
7, “Writing CGI Scripts.” The next field contains the suffix at the 
end of the file name. If the Mac file type is known, that is included 
next. If the file’s creator code is known, this information is included 
in the mapping entry. Finally, the appropriate MIME type and sub- 
type are listed as well. 




Each Mac file contains a four-character creator code. This code 
tells the operating system which application aeated the file. Each 
application has a unique case-sensitive creator code. Although it 
seems counter-intuitive to assign a suffix to a Mac file, it prevents 
Webmasters from haying to use a resource editor like ResEdit to 
determine the creator code of a file created by GraphicGonverter 
versus a code for a Photoshop file. Also, there are many different 
types of HTML editors, each with a different creator code. It's a 
lot simpler to leave the creator code off the mapping and just 
indude an HTML suffix; otherwise, you'll need to update your 
contig file every time you instedi new software. 
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If a file is included in the HTTP response that does not conform to 
any of the criteria, MacHTTP sends the default mapping, telling 
the browser it’s sending down an HTML file. This default 
mapping is 

TEXT .html TEXT * text/html 

The asterisk denotes that the creator code for the default HTML 
setting is unknown or left out. Examples for various MIME suffix 
mapping entries are in the MacHTTP.config file. 

MacHTTP sets up MIME headers that tell the requesting Web 
browser what sort of files are included in the response. It is essen- 
tial that the browser have the same MIME type information in 
order to process the file. If you want to serve BinHex files, for ex- 
ample, you would use the following suffix mapping 

TEXT .hqx TEXT BNHQ application /mac -binhex40 

The browser knows nothing about the file name, its suffix, its 
creator code, or even if it’s a Mac file. It just knows that the 
MacHTTP is telling it that its MIME type is application/mac-bin- 
hex40. To decode the file, the application that decodes BinHex files 
needs to be resident on the browsing computer, and the browser 
needs to have that application identified with the MIME header 
application/mac-binhex40. 

Configuring for Security 

MacHTTP secures HTTP connections two ways. Both of these 
methods require modifications to the MacHTTP.config file. The 
first method involves using the DENY and ALLOW parameters. As 
described in Table 4.2, these keywords restrict or allow access to 
the server by host name or IP address. When MacHTTP detects at 
least one entry of either keyword, it automatically implements a 
DENY * setting restricting access to all connections. You have to 
add appropriate ALLOW keywords to allow entry by desired users. 
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You can restrict access by partial domain listings. For example, if 
you insert the listing 

ALLOW anyplace.com 

no one except those users in the anyplace.com domain can access 
the site. Similarly, look at the following entry 

ALLOW 128.183.4 

This restricts everyone except those whose address begins with 

128.183.4. Note that this entry will allow users with an address 
128.183.40.* or any other address that begins with the number 
following the ALLOW keyword. To only allow users from the 

128.183.4. * subnet, you would have to add a trailing period after 
the subnet address. 

Another useful means of restricting access is to restrict it according 
to file name. In this way, you can allow users unrestricted access to 
certain files. However, certain other files can be restricted accord- 
ing to a phrase in the URL. This is accomplished with the REALM 
keyword. For example, you can create a secure group entitled 
BeanCounter; only members of this group are allowed to access any 
file containing the string financial. 

REALM financial BeanCounter 

Now go into the MacHTTP application. Under the Edit menu, 
choose the Passwords option. You’ll see a menu similar to what 
is displayed in Figure 4.1. Reading the MacHTTP.config file, 
MacHTTP will determine that the REALM BeanCounter exists 
and will allow you to add users and passwords to that realm. Now 
members of this realm will be the only users able to access any file 
containing the phrase financial. 
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Figure 4.1 MacHTTP allows you to define users and passwords to 

restrict access to certain files. 



Running MacHTTP 

Now that you’ve configured MacHTTP the way that you want, it’s 
time to start using the application. Several capabilities within the 
program enable you to further customize its usage. 



Logging Accesses 

After you’ve started publishing your Web server, expect a flood of 
the unwashed masses to show up at your doorstep. Soon enough, 
you’ll see the MacHTTP log filling up with users. This information 
will be displayed in the status window (see Figure 4.2). Note that 
you will receive information about the date and time of the access, 
the user’s IP address, what file was accessed, and how many bytes 
were transferred. When you restart MacHTTP, the status window 
will be empty, but the MacHTTP.log file will still maintain the pre- 
vious accesses. 

The top two lines of the status window give more information. The 
statistics are displayed to enable you to tune the MacHTTP.config 
parameters for better performance. The display can be summarized 
as follows in Table 4.3. 
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Figu re 4.2 The MacHTTP status window provides information 
about accesses to your server. 



Table 4.3 MacHTTP Statistics Display 
Statistic Description 



Total 


Represents total number of connections re- 
corded while MacHTTP has been active. 


Max 


Displays MAXUSERS parameter. 


Listening 


Displays MAXLISTENS parameter. 


Current 


Represents number of current connections to 
the server. 


High 


Displays historically highest number of users. 


Busy 


Shows how many clients have been refused 
service because number of users has exceeded 
MAXUSERS. Use this statistic to tunc 
MAXUSERS. 


Denied 


Shows how many requests were denied access 
for security reasons. 



continues 
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Table 4.3 Continued 



Statistic 


Description 


Timeout 


Shows the number of connections that have 
timed out. A large number of timeouts may 
mean that your server is not keeping connec- 
tions open long enough and that the 
TIMEOUT option needs to be increased. 


Free memory 
Max 


Represents the historically highest amount of 
memory available to MacHTTR 


Current 


Represents the current amount of free memo- 
ry available to MacHTTP. Unless you are 
using a memory- management tool like 
Connectix Corp.’s RAM Doubler, this memo- 
ry may not all be available to the application. 
It should be monitored as to how close it is to 
the minimum memory statistic below. 


Min 


Represents historical low of RAM available to 
MacHTTP. MacHTTP must have at least ISO 
KB to run certain CGI scripts. Use this statis- 
tic to determine how much memory should 
be allocated to MacHTTP. 


Sent 


Details the total amount of data transferred in 
kilobytes. 


Up Since 


Displays time that server was launched. 



WebStat and ServerStat are programs that use the MacHTTP log 
file to summarize and compile reports about accesses. They will be 
discussed ift Chapter: 5, "Managing Your intrarret VYeb Services " 

Verbose Logging Messages 

Under the Option menu, you can drag down to Verbose Messages 
to cause MacHTTP to provide more status information with each 
access than what is described above. This information will be more 
comprehensive than you might need, because it pertains to high- 
level MacTCP information, but it may aid in identifying connection 
problems. 
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Suspending Logging and Refusing New Connections 

If you need to edit your log file or edit some of the HTML pages 
you’re serving, you can suspend the access logging or even refuse 
new connections. Both of these options are available under the 
Option menu. When suspending logging, your users will still be 
able to access the server, but their actions will not be recorded. 
When refusing new connections, users will be notified that connec- 
tions are being refused temporarily. 

Hiding the Status Window 

You can hide the status window by toggling Hide Window in Back- 
ground. Then when you leave MacHTTP, the status window will 
disappear. The window reappears when you return to the applica- 
tion. This is useful especially if you use the Macintosh for other 
applications and need to conserve your screen real estate. You can 
always hide the window using the standard MacOS tricks of choos- 
ing Hide MacHTTP from the application menu or Option-clicking 
on the desktop. 

Serving Nonstandard Mac Files 

You may want to serve other types of files from the standard JPEG, 
GIF, HTML, audio formats. For example, you may want to serve 
Microsoft Word documents or Microsoft Excel spreadsheets to 
both Macintosh or Windows users. To do this, you must configure 
your suffix mappings with the information that informs the browser 
as to the type of file you are sending. If you wanted to publish a 
Microsoft Word file, for example, you would install the following 
entry in your MacHTTP.config file 

BINARY .msw WDBN MSWD application /msword 

Because the Microsoft Word files actually are binary files, you need 
the BINARY keyword. The suffix you assign to Microsoft Word 
files is arbitrary as long you’re consistent; I have chosen .msw. The 
file type and case-sensitive creator codes are given as well as WDBN 
and MSWD. The standard MIME type for Microsoft Word files is 
application/msword. The browser will have to have this MIME 
type defined and will have to define Microsoft Word as a helper 
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application for files of this type. Clicking on a link that serves a 
*.msw file will cause the server to send the file down to the brows- 
er; the browser will then launch the file inside Microsoft Word. 
This can be done for any file for which the browser has a defined 
MIME type/subtype. 



NOTE ^ You can define other nonstandard VyilME types to serve Macfjl^. 

w The convention is to append an X to the front of the MIMEsub- 

type. For example, asample MIAAE headerfor a Canvas document 
would be application/x-canvas. 



WebSTAR 




WebSTAR is the commercial follow-up to MacHTTP. Chuck 
Shotton, MacHTTP’s author, was hired in 1994 by StarNine Tech- 
nologies Inc. (which has since been acquired by QuarterDeck). 
Shotton and StarNine still support MacHTTP; however, it is clear, 
as with most shareware/commercial pairings, that the development 
emphasis will be on WebSTAR and its ancillary programs. 



StarNine claims that WebSTAR offers more functionality than 
MacHTTP. These are summarized here: 



□ Multithreaded operation. Multiple threading is the closest 
you’ll come to preemptive multitasking with the current 
MacOS. WebSTAR enables you to use multiple threads, which 
StarNine claims make WebSTAR 3 to 4 times faster than 
MacHTTP. The multiple thread processing is enabled by the 
Thread Manager extension bundled with WebSTAR as well as 
the MacOS from System 7.5 and later. 

□ WebSTAR Admin. Whereas MacHTTP required you to edit 
an ASCII text file to configure MacHTTP, WebSTAR is cus- 
tomized through a separate application, WebSTAR Admin. 
Furthermore, WebSTAR Admin can be operated over a local 
area network to administer a remote WebSTAR server. 
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□ Enhanced interoperability. WebSTAR is fully scriptable, 
meaning that many of its configuration parameters can be 
modified through external AppleScripts. Furthermore, Web- 
STAR supports additional AppleEvents for use in CGI scripts. 

□ Customizable logs. WebSTAR offers an improvement over 
MacHTTP in the variety of information that can be recorded 
in the access log file. More information about the clients can 
be retained as well as more specific information about the 
transaction. 

□ Enhanced support for aliases. Whereas MacHTTP support- 
ed only file aliases, WebSTAR supports aliases to files, folders, 
and mounted volumes. Chapter 5, “Managing Your Intranet 
Web Services,” discusses why the use of aliases of any type in 
your Web server file system is imprudent. 

□ User-defined actions. You can perform actions on files based 
on their suffix. With MacHTTP you have to execute a distinct 
CGI or ACGI script to run certain processes. 

□ Pre- and postprocessing of browser requests. You may have 
some need to preprocess or postprocess a browser request. 

For example, you may want to route a database-related re- 
quest to a WebSTAR server that is located on a machine with 
an appropriate database. Additionally, you may want to post- 
process a request by taking the information and creating a 
special access log. 

Installing WebSTAR 

One disadvantage of WebSTAR is that it requires more memory 
than MacHTTP. StarNine recommends that you assign at least 1 
MB RAM to WebSTAR for the default 12 connections; 3 MB 
RAM should be allotted for 25 connections. The correct amount of 
RAM for your usage should be allocated by reviewing the memory 
statistics discussed later in this section. 

To install WebSTAR, drag the WebSTAR folder onto your hard 
drive. Double-click on the Installer icon inside the folder. The In- 
staller will load MacTCP, AppleScript, some scripting extensions, 
and the Thread Manager extension into the System folder. 
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The Installer will load WebSTAR Admin into the WebSTAR folder. 
WebSTAR Admin is the administrative utility used to customize 
WebSTAR Whereas the MacHTTP.config file was required to con- 
figure MacHTTP, WebSTAR Admin provides the same fimctional- 
ity. Moreover, you can install WebSTAR Admin on a separate 
Macintosh to remotely administer WebSTAR You can even admin- 
ister multiple WebSTAR servers with one copy of WebSTAR Ad- 
min. For now, move WebSTAR Admin to its own directory. 

More discussion about organizing your Web server folders is in 
Chapter 5, “Managing Your Intranet Web Services.” You should, 
however, partition your WebSTAR folder into separate folders that 
contain script, image, and HTML files. A sample WebSTAR folder 
hierarchy is shown in Figure 4.3. The WebSTAR Settings file will 
appear when you first launch WebSTAR 
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Figure 4.3 A WebSTAR folder can be partitioned with scripts, 
images, default files, and HTML in separate folders. 



Setting Up WebSTAR Admin 

WebSTAR Admin does not support remote administration through 
IP connections. Therefore, you are limited to administering only 
those servers that reside on a local AppleTalk network. This 
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unfortunately limits your capability of remotely administering a site 
from your home. Many Internet service providers (ISPs) support 
SLIP and PPP. If you work in a large organization, chances are that 
they maintain a private PPP service. Almost all ISPs, as of this writ- 
ing, offer some form of PPP service. 

Few providers, however, offer remote AppleTalk access. This usual- 
ly is provided through a protocol known as Apple Remote Access 
(ARA). As much as PPP enables you to act as a node on the Inter- 
net, ARA enables you to participate in an AppleTalk network 
through your modem. While connected to ARA, you can print and 
access other computers as if you were connected through your Ap- 
pleTalk port, albeit much more slowly. If you want to administer 
your server from home or another remote location, you must have 
access to an ARA server, or you v^ll have to invest in hardware that 
allows such access. 

You have the option of running WebSTAR Admin either on the 
same computer that WebSTAR resides or on a different computer. 
The first case is trivial, so we’ll cover what is required to run 
WebSTAR from a remote computer. To access a WebSTAR server 
through a remote server, you will need to make the application and 
its host computer accessible to you through the local AppleTalk 
network. This is easily done through System 7’s file sharing capabil- 
ity. There are three steps to this process: 

□ Enabling WebSTAR’s host Macintosh to support file sharing 
and linking 

□ Creating access privileges on the host Macintosh 

□ Enabling WebSTAR to support links to other applications 

If you participate in a local AppleTalk network, chances are you 
have file sharing turned on already. Even so, let’s review how it is 
done. 
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File sharing was introduced as a feature of System 7 back in 1 991 . 
It allows peer-to-peer sharing of data and applications. Essentially, 
every properly configured Mac on a AppleTalk network with file 
sharing turned on is an AppleTalk server. Users can log on to your 
computer and exchange files. You can even run applications resi- 
dent on other Macs over the network. Program linking is a lot like 
running an application over the network, except that you are al- 
lowing applications to communicate with one another. 



All these actions must take place on the WebSTAR host computer; 
let’s assume that you have WebSTAR residing on a remote ma- 
chine. Choose the Sharing Setup control panel. A dialog box like 
that shown in Figure 4.4 will appear. It’s advisable to enable file 
sharing if you like as well; be advised that you open your server up 
to huge performance hits if someone launches a huge application 
on it. Enter the appropriate user information and click the bottom 
button to enable program linking. 




Figure 4.4 Program linkin^i can be enabled in the Sharing Setup 
control panel. 



Now you’ll want to allow access to the Macintosh so that you can 
link WebSTAR Admin to WebSTAR on tliis machine. To do this, 
select the Users & Groups control panel. Double-click on the user 
to whom you want to give administrative privileges. You’ll see a 
display similar to that in Figure 4.5. Click on the bottom checkbox 
in the user’s profile box to allow the user to link programs to this 
Macintosh. 
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Figure 4.5 You can enable program linking for users through the 
Users & Groups control panel. 



Finally, you’ll want to enable WebSTAR to link to other programs, 
in this case, WebSTAR Admin. To do this, click on the WebSTAR 
application and choose Sharing from the File menu. If it is not al- 
ready checked, click on the checkbox to enable WebSTAR to link 
with WebSTAR Admin as shown in Figure 4.6. 
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Figure 4.6 You need to enable program linking on WebSTAR to 
allow it to communicate with WebSTAR Admin. 



Configuring WebSTAR with WebSTAR Admin 

Now go back to the computer where you have WebSTAR Admin. 
To do this, use WebSTAR Admin to configure the parameters that 
you previously entered in the MacHTTP.config file when you 
worked with MacHTTP. As a result, you need to have an active 
WebSTAR session before you can run WebSTAR Admin. Do this 
by double-clicking on the WebSTAR application. The status >vin- 
dow appears, but we’ll talk about that later. 
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The first time you start the application, you’ll be asked for an 
evaluation key or serial number. You can validate the software by 
contacting StarNine (800-525-2580 or keys@starnine.com) for an 
evaluation serial number. The eval key will enable you to run the 
program (as a trial) for several weeks after which time the key will 
expire. You’ll be expected to purchase the software if you have fur- 
ther interest in using it. 

After WebSTAR is active, launch WcbSTAR Admin. If you are run- 
ning WebSTAR Admin from a remote computer, you’ll be asked to 
find the AppleTalk zone and computer on which WebSTAR is nm- 
ning. If you’re running the two applications on the same computer, 
you will see a dialog box similar to that shown in Figure 4.7. 
Choose the WebSTAR application and click OK; if you are running 
multiple WebSTAR servers on the same computer, you will have a 
choice of several different servers. 



Pick a server 



Macintoshes 



Pick a server 




Figure 4.7 WebSTAR Admin lets you choose which server to 
administer. 



After you pick a server, a monitor window for that WebSTAR pro- 
cess will appear (see Figure 4.8). The IP address and port number 
appear in the title bar. This is useful when you are running Web- 
STAR on multiple servers and want to display multiple monitor 
windows. 

The upper-left of the window presents a miming histogram detail- 
ing the number of current connections along with the maximum 
number of users. The thermometer graph below it details the 
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amount of free memory used by WebSTAR versus how much is 
allotted to it. Monitoring both of these graphs will enable you to 
tune the performance of the server. 

In the right-hand section of the monitor window, you see displays 
of several configuration parameters. All of these parameters were 
covered in the MacHTTP configuration discussion. However, it 
can be seen that die WebSTAR version number is included in this 
window as well. 




Figure 4.8 The WebSTAR Admin monitor window enables you to 
monitor and configure a WebSTAR server process. 



Several configuration options are available under the Configure 
menu. Although they offer much the same functionality as the 
MacHTTP configuration file, the interface is more intuitive in 
WebSTAR 

Suffix Mapping 

WebSTAR offers a simple means of modifying the suffix mapping 
used to encode MIME messages. In the Configure menu, choose 
Suffix Mapping and a dialog box will appear similar to that shown 
in Figure 4.9. A list of default suffix mappings is found in the dia- 
log box. The data for each mapping is arranged using the same 
fields we encountered in the MacHTTP.config file. 
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If you are just reading the WebSTAR section of this chapter, a full 
discussion of how WebSTAR and MacHTTP use suffix mappings to 
create MIME message headers is provided earlier in this chapter. 
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Figure 4.9 Suffix mappings cati be added with WebSTAR 
Admin^s suffix mapping editor 



You can add, delete, or edit these mappings. Several action key- 
words already are defined in the dialog box; the options include 
TEXT, BINARY, SCRIPT, CGI, and ACGI depending on which 
describes the file. The arrow keys move the entries up and down. 

Actions 

A useful feature of WebSTAR is the addition of user-defined ac- 
tions. For example, if you had a special form that you wanted han- 
dled by a special CGI script, you could add the suffix *.form to that 
file and define that it would be handled by a particular script. Tliis 
is useful if you customized one particular script that can be used by 
a variety of forms located all over your server. In this manner, the 
URL included in the form would be overridden by the user-defined 
CGI. 

To do this, you can click on the Configure menu and choose the 
Actions item. Tliis brings up the actions editor as shown in Figure 
4.10. With this editor, you can add, delete, and edit user-defined 
actions. In the application field, you enter the name of the applica- 
tion or script diat you want to process this type of file. You need to 
use the colon separator to denote the file location including the 
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necessary folders; the locations are referenced from the folder con- 
taining the WebSTAR application. Enter the action name in the 
Action Name field. After pressing the Update button, you should 
be able to access these new actions in the Suffix Mapping dialog box. 




Figure 4.10 User-defined actions can be created with WebSTAR 
Admin^s Actions editor. 



Restricting Access to Your Server 

The concept of security realms in WebSTAR is equivalent to diat 
used in MacHTTP. A realm is a means of adding security to a series 
of files and folders; only those users belonging to certain realms are 
allowed to connect to URLs diat contain certain strings. You can 
add and edit realms by clicking on the Configure menu under die 
Realms item; see Figure 4.11 that shows the Realms dialog box. 
You add the realm name and matching string in the appropriate 
fields. 




Figure 4.11 Tou can restrict access to certain documents and 
folders using the WebSTAR Admin Realms editor. 
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You add passwords to the realms using the Password editor. Open 
the editor by clicking on the Add Passwords editor under the 
Configure menu item. This allows you to assign user names and 
passwords to various realms. The available realms are listed in the 
popup menu at the bottom of the editor as shown in Figure 4.12. 




Figure 4.1 2 Web Admin offers a simple means of addinjf pass- 
word protection to your files a7id folders. 

Specifying the WebSTAR Log Format 

WebSTAR Admin offers a flexible means of customizing your serv^- 
er access log. Click on the Log Format item underneath the Con- 
figure menu to open up the editor as shown in Figure 4.13. In this 
editor, you have 13 options that can be added to your server log 
file. These options detail information about the requester and the 
transaction. 

Log Format Option Description 

AGENT The identity of the WWW browser client. 

BYTES_SENT The number of bytes that were transferred in 
the transacdon. 

DATE The date of the transaction. 

FROM Contents of the HTTP From: field. Some 

browsers include die user’s email address if 
available. 

HOSTNAME The client’s IP address. 

METHOD If a form was involved, this string details the 

method: GET or POST. 

PATH_ARGS The path arguments if the command is a re- 

quest for a CGI script. 
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Log Format Option Description 

REFERER[sic] The URL from which your server was referred. 

SEARCH_ARGS The search arguments if the command is a re- 

quest for a CGI script. 



TIME The time of the transaction. 

TRANSFER TIME The amount of time (in I /60ths of a second) 
needed to complete the transaction. 



URL 

USER 



The URL requested by the browser. 

The user’s name if the request was 
authenticated. 



I Log Format ! 
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Figure 4.13 Tou can specify options for formatting your server 
access log with WebSTAR Admin^s Log Format editor. 



Using the Log Format editor, you can add or remove any of these 
options customize your WebSTAR access log. These options are 
added and removed through the Cancel and Update buttons. Fur- 
thermore, the options can be positioned relative to one another via 
the up and down arrow buttons. 

Keep in mind that as you add more logging options your server will 
slow as your log file grows in size that much faster. For sites with 
thousands of accesses per day, an additional option can add thou- 
sands of bytes to the file each day. It can become time consuming 
to develop statistics for large log files, so only include the options 
you absolutely need. 
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Other applications such as WebStat and ServerStat can maint^n 
sophisticated logs for MacHTTP and WebSTAR. You can even us? 
these applications to display the logs as HTML. See Chapter 
"Managing Your Intranet Web Services," for more details. 



Configuring Server Access Parameters 

You can configure the miscellaneous parameters using the Misc. 
Settings option under the Configure menu. In this dialog box, 
shown in Figure 4.14, you see many of your old fHends from the 
MacHTTP.config file. There is a checkbox for DNS lookups and 
two new fields. As mentioned earlier, you can assign certain CGIs 
to preprocess or postprocess various URLs. These CGIs would be 
listed in the appropriate fields here. 




Figure 4.14 WebSTAR Admin offers a compact means of modify- 
ing access parameters. 



Using WebSTAR 

The WebSTAR Status Window should look familiar to you, as it’s 
almost the same display that we saw during our MacHTTP discus- 
sion. This is obvious from a comparison of Figure 4.15 to Figure 
4.2. The same is true with the menu items under Option: you can 
suspend logging, refuse connections, change to verbose logging, 
and hide the window in the backgrovmd, similar to how we learned 
how with MacHTTP. One new feature that is extremely useful is 
the Serial Number tool. This tool enables you to display your serial 
number and technical support ID, You can store several serial 







Chapter 4 Macintosh HTTP Servers 


101 







numbers depending on how many WebSTAR ancillary applications 
you have running. This tool is available under the Serial Numbers 
item in die Menu dialog box. 




Figure 4.1 5 Look familiar? The WebSTAR status window is simi- 
lar to the MacHTTP status window. 



You can run multiple WebSTAR servers on the same Macintosh, 
although you will need a distinct serial number for each application. 
With a fast Mac and network connection, you could be able to 
serve different directories with simultaneous WebSTAR processes. 
Keep in mind that you’ll still be working against MacTCP’s 64- 
connection limit. WebSTAR will allow you to utilize up to 50 of 
those connections, compared to MacHTTP’s 48, which gives you 
slightly more margin to install multiple servers. This is providing 
you don’t intend to run a lot of other servers on the machine. 

WebSTAR’s greatest strength lies in the way it utilizes specialized 
CGI scripts. Preprocessing and postprocessing URLs offer a lot of 
promise, as do user-defined additions. Keep in mind that these 
modifications are not supported on other platforms at diis time. 
Adding some of tliese features to your code limits its portability to 
servers running under other operating systems. How to work witli 
CGI scripts is discussed in more detail in Chapter 7, ‘"Writing CGI 
Scripts.” 
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Other WebSTAR Applications 

WebSTAR BG is a relative newcomer to the StarNine stable of 
products. It’s essentially a background-only version of WebSTAR 
There’s no direct interface to the application, but it uses the same 
settings file as normal WebSTAR The advantages of using it, ac- 
cording to StarNine, is that it’s slightly faster than even running a 
Power Mac-native version of normal WebSTAR Because it runs in 
the background, it will be harder for careless users to accidentally 
shut the system down. 

StarNine also took over Microsoft Mail back in 1994. StarNine 
Mail, as it’s now called, enables you to exchange SMTP mail with 
other users. The extended AppleEvents supported by WebSTAR 
enabless sophisticated integration between StarNine Mail and Web- 
STAR ListSTAR is a mailing list application firom StarNine that we 
will discuss later in this book. 

WebSTAR/SSL is a WebSTAR add-on application that employs the 
Secure Sockets Layer (SSL) protocol developed by Netscape Com- 
munications. This application enabless secure transactions between 
a WebSTAR/SSL server and a secure browser such as Netscape. 
Secure transactions enable financial and confidential Web traffic to 
occur. 



InterServer Publisher 




InterServer Publisher is a fully featured Intranet server developed 
by InterCon Systems. In contrast to MacHTTP and WebSTAR, 
which only serve Web pages, InterServer Publisher serves files 
through the Web, FTP, and Gopher with one application. This 
section discusses the Web server aspects of InterServer Publisher. 
For more information about FTP, see Chapter 10, ^FTP Services.” 



Installing InterServer Publisher 

In the InterServer Publisher on tlie CD-ROM, double-click on the 
InterServer Installer icon. You’ll be presented with the standard 
installer dialog box. Furthermore, you’ll be queried as to whether 
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you want an Easy Install or a Custom Install. The Easy Install op- 
tion will add a lot of ancillary software such as the following: 

□ Clip art 

□ HTML Pro editor 

□ GraphicConverter 

□ InterCon’s own Web browser, NetShark 

MacTCP is installed during an Easy Install if you do not already 
have a copy; if you have one but it’s not as recent as version 2.0.6, 
the installer will replace your version. Like other MacOS installation 
procedures, you can always pick and choose which features you 
would like to see added. Select where you want the application 
installed and proceed with the installation. 

Let’s assume tliat you performed the full installation of InterServer 
Publisher. The installer then inserts the InterServer Publisher ex- 
tension into the Extensions folder of your System folder. Unlike 
other installations you may have run, you are not required to re- 
start your Mac after the installation. 

The InterServer Publisher extension does all of your Web, FTP, and 
Gopher service. There are four applications used in conjunction 
with the extension. These applications are described here. 

Application Description 

InterServer Publisher Setup Initializes Publisher and configures 

WWW, FTP, and Gopher service 

StartServer Starts Publisher service 

StopServer Stops Publisher service 

InterServer Log Viewer Views access log window without using 

InterServer Publisher Setup 



These four applications are all that you need to run your Web 
server. Just double-click on the StartServer icon and you are ready 
to start publishing on the Web. 
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Using InterServer Publisher Setup 

The InterServer Publisher Setup application is the most involved of 
all the ancillary applications you’ll need to run to set up Web ser- 
vices using InterServer Publisher. Double-click on the InterServer 
Publisher Setup icon to launch the application. If you have not 
launched the StartServer application, launching Setup will initiate 
this process. 

The InterServer Publisher Configuration editor will appear on your 
desktop. It looks quite similar to the old pre-System 7 control 
panel arrangement as shown in Figure 4.16; as in the figure, the 
Minimal configuration panel should be active. In the field marked 
General, you need to specify your server’s node name. To enable 
your Web service, simply click the box entitled Enable World Wide 
Web server. Presto! You’re back on the Web! 






||Mor*Gop»Mr I 



InterServCT Publisher ConffguratJon I 



- V*rM-VM* V»b Server 

[S Cruble VerW-VWe Vvb Svrvtr 
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- Gopher Server 
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L_Set_J Folder; /Bongo/Communtoetions/MerServor 



FTP Server - 



Q Enable FTP Server 

FoWer: /Bongo/System Folder /Control Panels 



Figure 4.16 TTje InterServer Publisher minimal configuration 
allows you to customize important features of your Web services. 



To further configure your Web server, you then need to click on 
the More Web configuration panel. In this panel, shown in Figure 
4.17, you have additional parameters with wliich to customize your 
server. You can enter the maximum number of simultaneous Web 
connections. Sizing this number higher allows you to enable more 
users to connect to your server, but can slow down your HTTP 
processing. This number will likely need to be adjusted after view- 
ing the server statistics. 








Figure 4.17 Additional coyifiguration of InterServer Publisher 
Web services can be effected with the More Web configuration 
panel. 



You can then set your TCP port. By convention, Web servers are 
assigned port 80, but you can set this to a different port if you de- 
sire. Remember to set your port to a number liigher than 1024 to 
avoid conflicting with other IP services. 

As mentioned previously, your Intranet services will likely be locat- 
ed behind a firewall of some type, as described in Chapter 1 3 , 
"Intranet Server Security." If not, then you may want to set your 
Intranet Web pages to a nonstandard IP port to help keep out 
prying eyes. 

You also can specify the time that you want to hold open idle con- 
nections. Remember that the more connections you hold open, the 
fewer chances you have to handle other HTTP requests. As HTTP 
is such a nimble protocol, it requires little time to transfer data. If a 
connection is held idle for a long period of time, there is probably a 
network fault impeding the connection. You should therefore set 
this number to no more than one minute. 
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Because of the limitation of MacTGP connections, InterServer 
Publisher limits you to a total of 50 connections shared between 
your FTP, Gopher, and WWW servers. 



Securing Your Server 

You can use the InterServer Publisher Setup application to secure 
your server in the following ways: 

□ Specify domains and addresses to be allowed and denied ac- 
cess to the server 

□ Set up user accounts and passwords 

□ Utilize security realms to restrict access to certain files and 
folders 

Keep in mind that further discussion about securing your server is 
in Chapter 13, “Intranet Server Security.” 

Restricting Host Access 

In the InterServer Publisher Setup application, click on the Host 
Access configuration panel. The display should look like Figure 
4.18. You can enter the domain or IP address in the Web Allow or 
Web Deny. For example, to allow access only to members of the 
domain anyplace.com, you would enter ©anyplace.com in the Web 
Allow field. Conversely, you could deny access to the entire domain 
by entering ©anyplace.com into the Web Deny field. 

You also can specify subnets that you want to restrict or enable 
access to your server. For example, you may have information that 
you want to restrict to your organization’s marketing subnet; simi- 
larly, you may want to restrict access to certain data only by your 
organization’s R&D labs. If your organization is large enough, you 
will end up instituting subnets for your larger groups. 

As an example, entering the string 128.184.22 in the Web Deny 
field restricts any address in the I28.I84.22.xxx subnet. Entering 
any domain in the Web Allow field, leaving the Web Deny field 
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empty, enables only that domain to access the server. Conversely, 
entering any domain in the Web Deny field, leaving die Web Allow 
field empty, restricts only that domain from accessing files on that 
server. 



■ ■ z. : ■ interServer Publisher Configuration @ 




Figure 4.18 TT^e Host Access configuration panel enables the 
InterServer Publisher Setup application to restrict or enable access 
based on the user^s Internet address. 



Adding Users to Your Server 

You cannot only restrict or enable access by domain, but you also 
can customize the privileges of individual users. Users with similar 
privileges are grouped into realms; members of realms have access 
to certain files and folders. Before we talk about realms, we need to 
learn how to add users to the system so that we can create realms. 

Scroll down die left side of the Setup application and click on the 
Users configuration panel. A dialog box similar to that shown in 
Figure 4.19 will appear. In the top right of the window, there are 
three buttons: New, Rename, and Delete. Click New to create a 
new account. A new dialog box will appear, and you can enter the 
user name. Click OK to close the New dialog box. Back in the Set- 
up applicadon, you can enter a password for diis new user. Note 
from Figure 4.19 that the password field is blocked, but unfortu- 
nately there is no password verificadon scheme. You then enter a 
case-sensitive password for the user. After you have accumulated 
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enough user accounts, you will be able to change the user names or 
even delete accounts using the Rename and Delete buttons. For 
now, ignore the checkboxes in the bottom half of the box; diey are 
more relevant for the FTP services. 
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Figure 4.19 Security realm user accounts can be created using the 
Users configuration panel. 



Creating Security Realms 

After you have accumulated a stable of potential users, you can 
arrange them into secure realms. Attributes of diese realms can be 
configured to permit all the relevant users to access certain parts of 
the file system. After privileges have been assigned to a realm, 
members of that realm can access files that contain certain key- 
words. These realms are constructed using the Security configura- 
don panel. 

Upon clicking on the Security configuradon panel, as shown in 
Figure 4.20, you will see a list of user accounts diat you have creat- 
ed. Once again, there are three buttons in the upper right of the 
dialog box. To create a new realm, click the New button. You’ll be 
prompted for the name of the new realm. Enter the name and click 
on OK. 
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Figure 4.20 Usiri 0 the Security configuration panels you can 
create realms that enable access to restrict folders or files. 



Members of a particular realm can access files that contain a certain 
string. For example, you may want to restrict access to a certain set 
of Web pages to members of your financial management time. If 
the access keyword for a realm is financial, members of tliat realm 
will be able to access any file or folder with a name containing the 
string financial. By selecting a realm in the Security configuration 
panel, a field opens up in the middle of the dialog box into which 
you can enter a realm keyword. In the user list field at the bottom 
of the page, you can add users to the realm by clicking on the col- 
umn to the left of the user names. You can create several realms in 
this manner. As expected, you can rename and delete realms using 
the appropriate buttons in the upper right of the dialog box. 

Maintaining an Access Log 

InterServer Publisher allows you to record a log of Web, FTP, and 
Gopher accesses. The access history is written in a tab-delimited 
text file, die contents of which can be pasted into a spreadsheet 
such as Microsoft Excel, or a database such as FileMaker Pro. As 
users access your server, pertinent information is written to the log 
file. You can manually archive versions of the log file or have ar- 
chives created automatically. Furthermore, InterServer Publisher 
allows you to view the log remotely. 
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Configuring Your Log Characteristics 

Click on the Log configuration panel in die InterServer Publisher 
Setup application. A dialog box similar to that shown in Figure 
4.21 will appear. You can specify whether you want to archive the 
log file manually, automatically archive it, or have the file archived 
when it gets to a specific size. Your choices of periodic archiving are 
daily, weekly, monthly, or yearly. Archiving your log file keeps the 
file size down and allows the individual archives to be small enough 
to be perused at a later date. Furthermore, you can click the appro- 
priate checkbox if you desire to view your log archives remotely. 




; 15 InterServer Publisher Configurirtfcm 

Arohtv* log : 

^ M«nu«11g 

Q Aflor spooifWd tlm* ; [ OnctAd^g I *^1 

O Antr spooifkd sizt: K 

Q ABov rtmoto log vWvIng 



53H 



security 




Figure 4.21 Tou can specify certain access log characteristics us- 
ing the Log configuration panel. 



The InterServer Publisher log file can be viewed by clicking on the 
Setup menu and dragging down to Show Log File. The following 
access data will be displayed under each entry of the log. 



Log Field 

Date 

Time 

Server Type 
Status 

Client IP Address 
Client Node Name 



Description 

Date of access 
Time of access 

Type of access (Web, FTP, Gopher) 
Indication of successful transfer 
IP address of client 
Client host name (if available) 
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Transfer Size Number of bytes transmitted during 

request 

Connection Duration Duration of HTTP connection 

Authenticated User Name User’s name if transaction was authenti- 
cated 

Requested File File requested by client 

Additional Notes Various information provided by the 

server 



These fields are not configurable. 



Archiving Your Log File 

As mentioned previously, you will want to trim the size of your log 
file periodically to prevent it from becoming too large. This is done 
by periodically saving your log to a separate file and clearing the log 
contents. You can maintain a series of archives to peruse your access 
statistics. 

One way to archive your log file is to do it manually. First, double- 
click on the StopServer application, which causes InterServer Pub- 
lisher to refuse new connections. Find the log file, named Current 
Log and give it some other name. The log files are stored in the 
InterServer Publisher Logs folder in the Preferences folder in the 
System folder. Then activate the StartServer application to restart 
your server. A new log file will be created. 

If you enabled remote viewing of your access log, you can access 
the current log and any archives you may have created. You can 
bring up the log page in a Web browser using the following URL: 

http: //your_server_address/ -log 

Your current log and any archive logs are available through hyper- 
text links on the resulting Web page. 

The InterServer Log Viewer is an application that you can use to 
view the current log if you are running Publisher on the same 
Macintosh. It’s a means of viewing the log file without having to 
open up the InterServer Publisher Setup application. 
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Administering InterServer Publisher 

Now that you’ve learned how to configure InterServer Publisher, 
you need to learn how to administer the ongoing Web service. 
There are several tools and tips at your disposal. 



Using the Status Window 

The Status window is available under the Setup menu item imder 
Show Status window. This window allows you to monitor current 
connections on your server. Each entry in this window details the 
following information: connection type; Web, FTP, or Gopher; 
client address; server activity; and completed percentage of the 
request. At the bottom of the Status window, the number of avail- 
able free connections for each protocol is displayed. You can close a 
connection by selecting a transaction and clicking the Close Trans- 
action button at the top of the window. 

Setting Up Your Web Sharing Folder 

Okay, you’re almost there! It’s time to start populating your Web 
Sharing folder. In the InterServer Publisher Setup application, you 
specified which folder would contain your HTML documents. This 
folder now becomes the root folder for your Web server file system. 
Folders in this folder can contain Web documents provided they are 
indexed correctiy in the Web browser. By default. Publisher enables 
you to specify a default file, index.html, for a Web folder. In this 
way, if a browser requests a URL that contains no file name. Pub- 
lisher assumes a default file name ofindex.html. 
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You do not need to store BinHexed and MacBinary versions of 
files in your InterServer Publisher file system. Publisher will send 
BinHex or MacBinary versions of the files if the file listed in the 
URL is appended with a .hqx or .bin suffix. This is important, as 
Publisher's lack of suffix mapping would make serving Mac files 
othenvise difficult. 



A Look at InterXTML 

InterXTML is an extension of HTML tliat is unique to InterServer 
Publisher. These tags add functionality to your Web pages that are 
normally only available with CGI scripts. The tags are processed by 
InterServer, which sends out standard HTML, so there is no in- 
compatibility with certain types of browsers. On tlie other hand, 
moving these pages to another server may be problematic. 

InterXTML tags can enable you to do tlie following: 

□ Create a directory listing of the files in your Web page 

□ Create counters displaying the number of Web page accesses 

□ Display the date and time of die most recent Web page modi- 
fications 

Use of the InterXTML tags adds functionality; but it also poses an 
added load to your server as compared to normal HTML. Further- 
more, use of the InterXTML tags prevents you from porting your 
code to other servers, even those running under the MacOS. We 
will discuss the InterXTML tags more fully in Chapter 7, “Writing 
CGI Scripts.” 
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NetPresenz 




NetPresenz is an FTP server for the Macintosh that runs Web and 
Gopher services as well. It’s written by Peter Lewis, the author of 
several Internet applications for the Macintosh, such as Anarchic 
and Internet Config in addition to other important programs. Net- 
Presenz is primarily an FTP server, but it will serve text and graph- 
ics files as well as CGI applications through HTTP connections. I 
will defer discussion of NetPresenz until we talk about FTP servers 
in Chapter 10, “FTP Services.” In that chapter, we’ll discuss how 
to set up NetPresenz and will also briefly cover how to configure 
the application to serve Web files as well. 



httpd4Mac 




The httpd4Mac server is the only free Web server discussed in this 
chapter. This server is in beta format (version 1.3b) and runs only 
on 68K Macs, but it’s useful enough to be discussed in this chapter. 
It’s designed as a no-fnlls server that just serves text and graphics; 
needless to say, CGI script support is not included in this version. It 
has a minimal interface, but it requires only several hundred kilo- 
bytes of RAM. 



Installing httpd4Mac 

Open the httpd4Mac folder and double-click on the httpd4Mac 
icon. The first time that you launch the application, it will look for 
a Preferences file. This file can be either in the Preferences folder 
inside the System folder or it can be in with the application itself. If 
it does not find a Preferences file in either case, it will create one in 
the Preferences folder and quit. You are then free to edit the well- 
commented Preferences file called httpd_prefs; you also have the 
option of moving it to the httpd4Mac folder. Instructions for edit- 
ing the httpd4Mac Preferences file are given here. 
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Background-only applications cannot be easily turned off once 
you've launched them. You usually end up having to restart the 
computer, as recommended by the author of httpd4Mac. 



Configuring httpd4A/\ac 

Configuring httpd4Mac consists of editing the file httpd_prefs cre- 
ated when you first launch the application. This file can be edited 
with a simple text editor like BBEdit or SimpleText. There are sev- 
eral ke}^vords that can be modified to configure httpd4Mac’s per- 
formance. 



httpd4Mac Configuration Faramcters 



Parameter 


Description 


check_syntax 


httpd4mac checks your HTML syntax and 
reports errors through notification window. 


notify 


On/off toggle, which tells httpd4Mac to 
notify user of various status messages. 


create_access_log 


On/off toggle, which tells httpd4Mac to cre- 
ate a new access log upon each restart. 


log_access 


On/off toggle, which controls whether 
accesses are logged. 


create_error_log 


On/off toggle, which tells httpd4Mac to cre- 
ate a new error log upon each restart. 


log-_errors 


On/off toggle, which controls whether 
accesses are logged. 


access_log_name 


Specifies access log file name. 


error_log_name 


Specifies error log file name. 


log_creator 


Defines creator code for log file name. This is 
important as it enables you to specify which 
application will open upon double-clicking the 
log file. 


dnr 


On/off toggle, which controls whether host 
names of accessing browsers need to be 
determined. 



continues 
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Continued 



Parameter 


Description 


log_q 


Tells httpd4Mac how deep to make the access 
log queue. If you have a great deal of accesses, 
this queue stores the access information in a 
queue before logging them. This parameter 
specifies how long that queue will be. 


translatejso 


On/off toggle specifying whether to translate 
8-bit ISO characters. 


http_port 


Specifies HTTP port number. 


streams 


Dictates how many MacTCP streams to assign 
to httpd4Mac, 


send_timeout 


httpd4Mac sends data back to the client in 
fixed 20K buffers. The application will time- 
out when the buffer has taken longer than the 
amount of time specified by this parameter. 


debug 


On/off toggle telling httpd4Mac to write 
debugging information to a file entitled 
http_debug__log. 


verbose 


On/off toggle affecting verbose log 
messaging. 


debug_buff 


If debugging is turned on, this parameter spec- 
ifies how many buffers are assigned for debug- 
ging messages. 


cache_life 


Specifies after how many seconds should ob- 
jects be deleted from the cache buffer. 


cache_check_on 


On/off toggle, which tells httpd4Mac to 
check file creation dates versus cache creation 
dates. If file is newer than cached version, it is 
sent to the browser. 


mime_def 


Provides MIME type translation. 


time_zone 


Time zone offset from Greenwich Mean Time 
for time stamping your logs. You can also enter 
your time zone (EST, CDT, and so on). 
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The httpd4Mac MIME definition parameter, mime_def, is config- 
ured as follows: 

mime_def ' creator__code ' & 'suffix' = MIME type/subtype 
^7\S 

Like the other Web servers, the creator_code is used if no suffix is 
appended to a file. The 7 or 8 at the end of the line denotes either 
7-bit or 8-bit encoding; a 7-bit encoded file denotes a text format, 
whereas an 8-bit file denotes a binary format. Like the other serv- 
ers, you can leave an as a wildcard. An example MIME defini- 
tion for an HTML file would be 

mime_def & html = text/html 7 

The mime_def parameters need to be lowercase. The httpd4Mac 
default MIME type is text/plain. 



— ^ 

NOTE , httpd4Mac only serves the data fork of a file. Therefore, you 

o cannot send binary files, such as MS Word or Excel documents, 

directly down to the browser. httpd4Mac's author, Bill Melotti, 
recommends a work-around by transforming the file into a 7-bit 
format using the BinHex compression scheme; in this manner, the 
encrypted information is stored in the data fork. You can then 
assign a MIME type of application/mac-binhex40; the browser will 
know to launch a helper application, which can decrypt the file 
back into its binary format. 



Other Web Servers 

Other commerical Web servers are available but were not reviewed 
for this chapter. With time, there may be more servers hitting the 
market as well. Both of the servers offer Internet services beyond 
HTTP. 
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NetWings Internet Server 

NetWings Internet Server is available from Netwings Inc. The ap- 
plication offers Web services, including CGI scripting through Ap- 
pleEvents, but also offers Gopher, email, and other administrative 
tools. The software is built upon the 4D database system. 



OneSite/Web 

Delphic Software has announced the OneSite/Web HTTP Server 
for the Macintosh. Delphic offers OneSite/Web as a freeware Web 
server with OneSite/Web+ offered as a fully functional Web server. 
OneSite/Web+ will also offer Gopher and FTP services. Delphic 
plans for a suite of Internet tools for the Macintosh, including 
NNTP, DNS, UDP, BootP services in addition to email and listserv 
functionality as well. 

Determining Your Server 

Of the Intranet server options mentioned in this chapter, it’s hard 
to beat MacHTTP in terms of bang for the buck. If you plan on 
running a small Web server with a few hundred accesses a day and 
some nominal CGI scripting, it’s hard to beat MacHTTP’s price 
and power. NetPresenz and httpd4Mac offer bare-bones service for 
straight text and graphics service and may be your choice if your 
resources are limited. 

If your Intranet is going to be servicing a large organization, your 
choices at this point are between WebSTAR and InterServer Pub- 
lisher. Both systems sport highly configurable interfaces and offer 
high performance. WebSTAR has a huge market share, and you wdll 
be able to get assistance from many people through Usenet. On the 
other hand, InterCon Systems has a long heritage with Macintosh 
Internet applications and InterServer Publisher offers FTP and 
Gopher services in addition to HTTP. 
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Summary 

The Macintosh maintains a sizable presence on the Internet mostly 
because of the ease of use and relative power of the servers men- 
tioned in this chapter. These servers range from bare bones to 
highly sophisticated. The Mac server market has come a long way 
from the original MacHTTP release. Servers like WebSTAR, In- 
terServer Publisher, and NetPresenz provide much the same func- 
tionality as more established Unix HTTP servers but without the 
complexity. 

The sophistication of the servers mentioned here does not detract 
from their simplicity and ease of use. These servers can be used to 
provide simple text and graphics for the simplest of Intranets or can 
provide powerful applications, secure transactions, and high-speed 
service for large and demanding intranets. 

In Chapter 5, “Managing Your Intranet Web Services,” we’ll move 
beyond the dry mechanics behind operating Web servers and we’ll 
talk about managing them. You’ll be introduced to some of the 
administrative tools and techniques available for aiding in your In- 
tranet Web service management. Or if you like, you can jump to 
the following chapters: 

□ Chapter 7, “Writing CGI Scripts,” to learn about writing 
scripts for your Web site. These scriptsenable you to process 
data from HTML forms and return customized Web pages. 

□ Chapter 8, “Databases and Document Searches,” to learn 
about how to enable your Intranet users a means of accessing 
your databases and searches document archives. 

□ Chapter 9, “Beyond HTML,” to learn about some techniques 
to spruce up your Web site beyond just using conventional 
HTML and graphics. We’ll discuss Java, RealAudio, and other 
cool topics. 

□ Chapter 13, “Intranet Server Security,” to learn how you can 
configure hardware to provide secure transactions within your 
Intranet and out to the Internet. 
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□ Appendix C, “Perfecting HTML,” to learn about HTML 
editors as well as some new and advanced HTML techniques, 
such as frames and server-push/client-pull techniques. 



Links Related to This Chapter 



Apple System Software Updates 

Apple Mailing Lists 

StarNine Technologies 
InterCon Systems 
Peter Lewis 

httpd4mac 

NetWings 
Delphic Software 
Usenet 



http ://www.support. apple .com/ 
wwwdocs/apple_sw_updates.html 

http://www.solutions.apple.com/ 

apple-internet/ 

http://www.starnine.com 

http://www.intercon.com 

http://www.share.com/peter- 

lewis/ 

http://sodium.ch.man.ac.uk/ 
pages/httpd4Mac/home .html 

http://www.netwings.com 

http://www.delphic.com 

comp.sys.mac.comm 

comp .infosystems.www.servers.mac 
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Services 



Publishing a fiill-fledged Intranet Web server is a multidisciplinary 
effort. We’ve talked about the rigors of choosing your server hard- 
ware and software, not to mention the effort of HTML program- 
ming, CGI scripting, and graphics design. As administrator of your 
Intranet, you will need to not only marshal your technical talents, 
but also your organizational skills as well. If Web services play a 
large role in your Intranet, you will need to very carefully organize 
the content and structure of your Web site. In this chapter, we’ll 
cover the following topics: 

□ Management of the server’s content 

□ Tips for organizing your documents and graphics files 

□ Tools to aid your server administration 

As mentioned previously. Til assume that you have worked exten- 
sively with HTML and graphics to be aware of the nomenclature 
used here. If not, consult Teach Yourself HTML in a Week, pub- 
lished by Sams.net Publishing. 

Managing Web Server Content 

Managing the content of your server’s documents is important 
because the Web server may be the most visible portion of your 
Intranet. If you are the only person within your organization with 
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access to your server, then the problem is a lot less complicated 
than if several people are contributing to the server’s development. 
The latter arrangement is more of a management challenge, so 
in this section, we’ll talk about how to manage your server with 
multiple contributors. 

Server Management Models 

The easiest management model for your server is one where the 
server is just sitting at your desk. For example, I have managed a 
Web and FTP server at work for several years. The server applica- 
tions reside on the same Mac that I use for most of my daily work. 
It’s a low-access server, as I get only 100-200 hits/day. I manage 
the server content, updating it whenever I get around to it. I main- 
tain a personal home page, and some bookmarks and files that I 
serve to others in my line of work. It’s a tiny little server but hey, 
it’s mine. 

You may have more grandiose aspirations. Running a workgroup 
server or a more organized server representing your organization 
will take a lot of your time. It might take more time than you have, 
so you may be considering getting some help developing and orga- 
nizing your server. This gets a little sticky because now you have to 
develop an efficient management scheme to provide consistent 
server content. There are several models that you can employ in 
developing and maintaining your server: 

□ Managed access. Colleagues and developers have restricted 
access to the system. 

□ Centralized access. The administrator is the only person with 
access to the system. This person approves and installs all con- 
tributed content on the system. 

□ Distributed access, A team of administrators is managed by a 
central administrator. Members of the team manage different 
areas of the server and work with users to publish files on the 



server. 
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Let’s talk about how these management models can be imple- 
mented. 

Managed Access 

In a managed-access server model, users have access to certain areas 
of the server. For example, a project team has access to the file 
server structure assigned to that project team. Users within die 
organization are able to post their personal home pages in folders 
assigned to them, but they are restricted from accessing other parts 
of the server. The server would continue to be managed by a cen- 
tralized administrator, but virtually unrestricted content would be 
placed on the server. A systems administrator maintains the ma- 
chine and creates accounts but exerts no managerial control over 
the content. A schematic of this model is shown in Figure 5.1. 

We'll talk more about security issues in Chapter 13, "Intranet Serv- 
er Security," but you should be aware of the risks involved with 
allowing other users upload privileges to your server. Unscrupulous 
users within your Intranet could put potentially invasive and harm- 
ful programs on your server, which could compromise the server 
contents. These privileges should be doled out with caution. 





Figu re 5 . 1 The mcma^fed-access server model enables users to up- 

load documents to certain areas of the server. 
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This model is adequate for small organizations, but could lead to 
chaos for large groups. This type of model is ideal for a server that 
just publishes personal Web pages. For more professional inten- 
tions, a different organizational structure would be required. 

Centralized Access 

In a centralized- access server structure, a central administrator is 
the sole contact to the server. Users can submit upload requests to 
the administrator, but are restricted from performing the upload 
themselves. The administrator has the full authority of the Web site 
including content, privileges, and organization. 

The centralized-access strategy is adequate for organizations with- 
out a lot of technically literate employees who don’t ftequendy 
update Web pages. This strategy could work well in a group where 
people know enough to work a word-processing application but 
want to stay away from FTP, TCP/IP, HTML, or any other scary 
acronym. Users within the group would need to forward the con- 
tent to the administrator; the administrator would convert it to 
HTML and upload it to the server. This again may work well for 
small groups with period server updates, but it still may be unsuit- 
able for larger groups. A diagram of this strategy is given in Fig- 
ure 5.2. 




Figure 5.2 There is only one point of contact to the server in the 

managed-access server topology. 
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Distributed Access 

In a distributed-access strategy, a centralized team of developers 
creates content for the server. The team is headed by a central 
administrator who serves as an editor-in-chief of the Web-site 
content. The development team edits, converts, and archives docu- 
ments contributed by the users; the team also creates a lot of the 
specialized CGI scripting necessary to perform workgroup or other 
functions. 

This model is used by large organizations and corporations to 
maintain their Web presence as well as manage content from their 
employees. Larger sites may receive hundreds of thousands of hits 
each day; the technical issues involved with serving that volume of 
traffic would be shared by a team of individuals. A diagram of this 
model is shown in Figure 5.3. 




Figure 5.3 The distributed-access server model is designed to work 

well for groups with large or popular Web sites. 
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Choose the Strategy for You 

Your organization likely fits one of the descriptions mentioned ear- 
lier. It’s also likely that your server will evolve as your organization 
finds uses for it. There are plenty of large Web sites that started out 
as a little old Mac server somewhere. It’s important that yoiu: server 
organization affords you the flexibility to efficiently publish your 
presence on the Web. 

Controlling Access 

The models described above are predicated on the idea that you 
can secure parts of your server and restrict access to certain parties. 
The MacOS is not a multiuser operating system in the same sense 
as Unix; however, there are provisions for enabling users FTP ac- 
cess. The topics of securing your server as well as managing FTP 
access to your Macintosh server vrill be covered in Chapter 13, 
‘‘Intranet Server Security.” 

Efficient Directory Structure 

Going back to my example server, I started some time ago keeping 
all my document files in my MacHTTP folder. Like I said earlier, 
it’s a small server. When I started adding more files to the server, 
things became chaotic. I had image files in the same folder as my 
AppleScript CGIs and they were all mixed in with my HTML files. 
You can imagine what my bedroom looked like as a kid. 

As your server grows, you’ll be faced with the daunting task of 
organizing your offerings in a coherent manner. Keep in mind that 
as your server needs increase, so will the capability of available 
Macintosh hardware. Furthermore, at some point, you may be 
forced to duplicate or move your server files to another platform, 
such as a Windows NT or a Unix machine. Here are some tips to 
keep your server file system flexible and portable. 

Using Relative URLs 

A popular HTML command is the <BASE> tag. This command 
lends itself to use of relative URLs, which are used to address 
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documents that reside on the same server. The argument of the 
<BASE> tag contains the root URL from which your files are 
served. 

Relative URLs versus Absolute URLs 



Do this 

<BASE HREF="http: //WWW. anywhere.com”> 

<A HREF="sample1 .html>Item</A> 

<A HREF=“sample2.html>Item</A> 

<A HREF=“ /test/sample3.html>Item</A> 

Instead of this 

<A HREF="http: //WWW. anywhere.com/sample1 .html>ltem</A> 
<A HREF= “ http : / /www. anywhere . com/sample2 . html>Item</A> 
<A HREF= " http : / /www. anywhere . com/test / 

^samples. html>Item</A> 



Use of relative URLs enables your files to be transported en masse 
to, or mirrored on, another server without a large edit of your 
code. Undoubtedly, you’ll upgrade your server hardware at some 
point. You’ll probably have to change your server IP address and 
maybe even the directory in which your server application is locat- 
ed. Using relative URLs enables you to transport the server files 
easily via FTP or some other media such as tape backup. 

Organizing Your Directory Structure 

If you’ve used the MacOS for some time, you’re probably comfort- 
able with the folders and files on the system. You’ve seen how long 
it takes to open a folder with 1,000 files in it. Like other operating 
systems, folders really exist so that you can find files reasonably 
quickly. The same is true of your Web server file structure. The key 
is to keep similar files in similar directories. 

Figure 5.4 shows a sample server file system. Note that images and 
scripts are kept in separate folders. The HTML files are kept free in 
the server folder. Project-specific HTML folders can be included as 
well to facilitate development and service of project-specific work. 
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Server Directory 





Project Directories 



Figure 5.4 An organized file system is one where HTML fileSy 
ima^eSy and scripts are maintained in separate folders. 



By keeping images in the same folder, you facilitate their access 
dirough the server file system. If you need to access a company 
logo, for example, you can reference it using the <BASE> tag and a 
relative URL with the same address from anywhere in the file sys- 
tem. The same is true of CGI scripts. 

Using Aliases 

Aliases are an easy way of making copies of files that act as pointers 
to the original copy. To take advantage of the Mac’s Drag and 
Drop feature, I keep aliases of my favorite applications on my desk- 
top; I can then open files by dragging them onto aliases as if I had 
dragged them onto the real applications. Furthermore, they only 
take up a couple of kilobytes of disk space. 

Keeping aliases in your server directories can be problematic for 
several reasons — the first of which is that they are not transportable. 
If you have to port, or duplicate, your server files to a computer 
using another operating system, the aliases will have no relevance 
outside the MacOS. Also, aliases do not disappear when you delete 
the original. Granted, there are shareware applications you can use 
to manage your aliases efficiently, but I recommend that you avoid 
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using them in your server directories entirely. There’s really no 
need to copy files throughout your server directory if you use rela- 
tive URLs. For example, use of relative URLs allows you to refer to 
the same GIF file, in many different HTML documents, without 
having duplicate versions of that file. 



Making aliases to directories outside your file server directory struc- 
ture is not a good idea for the reason that it spreads your server 
files out all over your Macintosh. You are looking to establish a 
compact file system for your server. Aliasing directories that are 
outside this system means that when you move yom server directo- 
ry, you’ll have to remember to move the aliased directory as well. 
Aliased directories destroy this compactness that you should be 
striving to achieve. 



Administrative Tools 

There are some tools worth having that will aid in maintenance of 
your Web pages. The applications listed here are by no means the 
only tools in their respective classes. For discussion on some useful 
HTML editors, see Appendix C, “Perfecting HTML.” 

Spreadsheet-to-HTML Table Conversion 

Microsoft Excel has become the de facto spreadsheet standard on 
the Mac. It’s used for many purposes including tabular display of 
data. It may be advantageous for you to publish some of your data 
on the Web. This can be done in two ways: 1) publish the Excel 
documents in an encoded format to be read by an Excel application 
on the user’s computer, or 2) convert the table to HTML 3.0 table 
definitions. With the second option in mind, there are several tools 
available to perform the conversion. Some of these are mentioned 
here: 




. When you convertyour spreadsheet to HTML 3.0 format, you will 
lose any formulae, macros, and other Excel-specific features. Y6u . 
can add these featiireshy aiding them with JavaScript. See Hay- ; . 
den's JavaScr/pf /brihe Maointosh for more information on pro- 
gramming with JavaScHpt 
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MS Excel to HTML Converters 

xl2 html.xls http : //v/ww? 1 0 .gsfc .nasa.gov /7 04 /dgd / 

xl2html.html 

Excel to HTML http://rhodes.edu/software/readmc.html 
Internet Assistant 

for Microsoft Excel http://www.microsoft.com/macofficc 

The first two applications are actually macros written in Microsoft’s 
Visual Basic (VB) programming language. As a result, both applica- 
tions require use of Microsoft Excel 5.0. These utilities have be- 
come very popular, like any other VB macros, they can run just as 
easily under Windows as they can under the MacOS. Microsoft’s 
Internet Assistant for Microsoft Excel is a freeware utility that walks 
users through the process of converting spreadsheets to HTML 
tables. 

HTML Grinder 

HTML Grinder is a powerful text-processing application designed 
to aid in making simultaneous changes to multiple text files. The 
Grinder is not a text editor but a batch text processor. You drag a 
collection of HTML files onto the Grinder; the files then appear in 
a dialog box similar to Figure 5.5. Some of the possible tasks you 
can perform include the following: 

□ Find and Replace text. You can find and replace text 
throughout a series of files. This is useful in changing the 
<BASE> tag if you move to another server or to another di- 
rectory on your server. 

□ Date stamp. You can automatically date stamp your Web 
pages. 

□ Netscape Color editor. You can select Netscape color codes 
and insert them in your document. Like some HTML editors, 
HTML Grinder uses the Apple Color Editors to help deter- 
mine the Netscape color codes. 

□ Creator code changing. This tool is useful for changing the 
creator code on a batch of files. File creator codes tell the 
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MacOS which application created that file. Double-clicking 
on the files opens the application designed in the file’s creator 
code. This can be tedious if you do not own the application 
that was used to create the file. This HTML Grinder tool 
enables you to change the creator code of a file to that of an 
application that you own. 

□ Linking your pages. Using the HTML Grinder, you can 
insert hypertext in your pages that links the pages together. 
This will allow users to navigate through a list of sequential 
pages using Next and Previous links. With another tool, you 
can construct an index linking to various spots in your pages. 

□ Creating Stretch lists. Stretch lists operate much like the way 
the MacOS lets you view folders and files when viewing the 
files by Name or Date. You can nest text inside your pages; by 
clicking on the stretch icons, you can make the text visible 
within the Web browser. This has the appearance of stretching 
the page. 




Figure 5.5 HTML Grinder performs a variety of tasks on files 
dra£i£fed and dropped onto it. 
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Clay Basket 

Clay Basket is yet another tool that purports to be more than just a 
text editor. In fact. Clay Basket isn’t really a text editor at all. Clay 
Basket is designed to aid in, as the author Dave Winer calls it, Web- 
site building. The freeware application enables you to develop Web 
sites from a top-down approach — you develop the oudine of the 
site first before developing the content of the individual pages. 

Clay Basket works in conjunction with text editors, such as BBEdit 
and PageMill, and browsers like Netscape to allow' you to construct 
and manage Web pages. Clay Basket is a full-featured outliner as 
shown in Figure 5.6. In this figure, an example included with the 
Clay Basket distribution, you can see that the hypothetical Web site 
is displayed in outline form. Using the software, you can click on 
one of the files to edit it or you can preview^ it with Netscape. 
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Figure 5.6 The Outline View in Clay Basket aids in managing 
entire Web sites. 



By constructing the oudine, you are constructing a hierarchy of 
Web pages. You can automatically link these pages together with a 
simple click of the mouse. Wliile in oudine view\ you can launch 
any text editor to modify the file. Clay Basket supports a wide vari- 
ety of templates to use in file creation. 
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Most important, Clay Basket works with the Frontier scripting en- 
vironment. Originally a commercial product, Frontier is now a 
freely accessible scripting environment that was actually introduced 
before AppleScript; the scripting language used by Frontier is 
known as UserTalk. Apple bimdled AppleScript with System 7.5; 
this eventually pushed Frontier to freeware status. Frontier will 
execute AppleScript files, but it offers more funcdonality than its 
Apple-supported scripting rival. Clay Basket uses Frontier scripts 
for many purposes; using Frontier scripts. Clay Basket enables you 
to assemble a glossary of links. When you are typing your FITML 
file, you can describe a link by including it in double quotes. Clay 
Basket uses a Frontier script to search your collection of URLs to 
look for an association between the link you’ve double-quoted and 
any link in your glossary. If it finds such a link, it automatically re- 
places the text with the HTML linking code. Other such Web-site 
management features can be employed using Clay Basket and the 
Frontier scripdng environment. 

Maintaining Server Statistics 

You will no doubt be interested in seeing who has visited your site 
and what they’ve been downloading. For this reason, you’ll want 
to employ some sort of statistics calculation application. Two 
Macintosh applications for this purpose are WebStat and ServerStat. 

WebStat 

CD-ROAfe\ WebStat is a simple application that reads the MacHTTP log file. 

PQy The application will also work with the WebSTAR log file as well. 

MacHTTP can be configured to write certain pieces of information 
into its log file. For the most part, this information consists of the 
user’s login time, IP address, and download information. WebStat 
takes this log file, and processes and tabulates the information in an 
HTML report suitable for publishing on your site. 

You configure the WebStat application by editing the 
WebStat.config file in the distribution folder. Using the configura- 
tion file, you can customize the statistics generation in the follow- 
ing ways: 
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□ Specify the input file name. MacHTTRLOG is the default 
format, but WebSTAR log files will work as well. 

□ Specify the output file name. The default file name is 
WebStat.html. 

□ Specify the default output format. This is a powerful fea- 
ture that lets you customize the output ofWebStat.html. The 
WebStat.format file is an HTML template that enables you to 
dictate the display of your statistics report. There are environ- 
ment variables read by WebStat for inclusion of the statistics. 
You can edit the format file to customize the report presenta- 
tion. 

□ Excluding sites. You can exclude certain sites from your re- 
port. For example, in your report you may not find it neces- 
sary to include the times that you tried out your own pages 
from a remote client. 

□ Addressing. Some Web clients do not transmit their fully 
configured IP address to your HTTP server; instead, you get 
their numerical address. Well, you can’t brag to your fiiends 
about the guy from Grenada who visited your site unless he 
has the gd at the end of his address. You can tell your domain 
server to substitute the mnemonic IP addresses for the numer- 
ical ones. This, however, adds to your processing time. 

WebStat will then sort your access statistics by summary (number 
of files and bytes downloaded), day, hour, weekday, IP domain, IP 
subdomain, and files that were downloaded. As your MacHTTP file 
grows larger, WebStat takes more and more time to process it. This 
requires periodic culling of your log file for accesses that are too old 
to be of interest. Every month, I manually remove listings that are 
more than two months old on my server. Depending on the num- 
ber of accesses you get, you may have to edit your file more fre- 
quently. 

To run this program on a periodic basis, you need some sort of 
Cron utility. Cron is a Unix system utility that runs scripts at prede- 
termined times. There are several Cron utilities for the Macintosh. 
The WebStat author recommends the use of Cron for the 
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Macintosh, by Mark Malson; the URL for the application is given 
in the WebStat README file. Although it worked fine for many 
months on my Mac Ilci, I have not been able to get Mark’s Cron 
utility to work without crashing my new Power Macintosh server. 
Instead, I recommend using Chris Johnson’s Cron utility; it’s a 
litde harder to use but works quite well. 

ServerStat Lite 

ServerStat Lite, derived fi'om its commercial cousin ServerStat, is a 
freeware statistics generation package. ServerStat Lite functions 
much like WebStat, although it produces statistics for WebSTAR 
and GopherSurfer, as well as MacHTTP. Rather than rely on text- 
based configuration files, ServerStat Lite offers a graphical user 
interface to customize statistics generation and reports. Reports can 
be written in HTML or plain text for editing purposes. Further- 
more, ServerStat Lite is scriptable, using AppleScript and UserTalk 
scripts for complete customization. 

ServerStat offers more functionality than ServerStat Lite. ServerStat 
is Power Macintosh native and also supports Open Transport. Serv- 
erStat is also more scriptable, and enables you to customize its op- 
eration to a greater degree than ServerStat Lite. Furthermore, Serv- 
erStat reports can contain links to different areas on your site. 

Summary 

As you can see, there’s more to publishing a Web site than just 
hanging graphics HTML off your server. As an Intranet administra- 
tor, you’ll have to administer your server keeping your links fresh 
and your content interesting. Luckily, there are several tools at your 
disposal to help you with Web server administration. 
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In the next chapter, we’ll talk about some of the tips for using 
graphics and HTML efficiendy to construct a Web site that’s easy 
to browse. Of if you like, you can jump to the following chapters: 

□ Chapter 7, “Writing CGI Scripts,” to learn about writing 
scripts for your Web site. These scripts enable you to process 
data from HTML forms and return customized Web pages. 

□ Chapter 8, “Databases and Document Searches,” to learn 
about how to enable your Intranet users a means of accessing 
your databases and searches document archives. 

□ Chapter 9, “Beyond HTML,” to learn about ways some tech- 
niques to spruce up your Web site beyond just using conven- 
donal HTML and graphics. We’ll discuss Java, RealAudio, and 
other cool topics. 

□ Appendix C, “Perfecting HTML,” to learn about HTML 
editors as well as some new and advanced HTML techniques, 
such as frames and server-push/client-pull techniques. 

Links Related to This Chapter 



xl2html.xls 


http;//www710.gsfc.nasa.gov/704/dgd/ 

xl2html.html 


Excel to HTML 


http://rhodes.edu/software/readme.html 


Internet Assistant 
for Microsoft Excel 


http://www.microsoft.com/macoffice 


Matterform Media 


http ://www.matterform .com 


HTML Grinder 


http://www.mattcrform.com/mf/grinder/ 

htmlgrinder.html 


Clay Basket 


http://www. hotwircd.com/stafF/uscrland/ 
yabbadabba/ 


WebStat 


http://snodaq.phy.queensu.ca/Phil/ 

phU.html 


Mark Malson’s Cron 


http ://snodaq .phy.queensu.ca/ 
Cron.sit.Hqx 
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Chris Johnson’s Cron 

Kitchen Sink Software 
ServerStat Lite 



http://gargravarr.cc.utexas.edu/cron/ 

cron.html 

http ://www.kitchen-sink.com/ 
http://www.kitchcn-sink.com/ ss.html 
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Creating an Efficient Web Site 

In your travels throughout the Web, you’ve probably come across 
sites that you felt were very well designed. They had good informa- 
tion, were graphically pleasing, and were easy to na\igate. In short, 
tliese sites were very browsable. 

Nothing is more frustrating than accessing a site that has good 
information content, but is difficult to browse. These kind of sites 
contain pages that are all in plain text with an abundance of 
network- busting graphics, and you have to hit the Back button 
on your browser because there are no links to the home page. The 
usability of your site within your organization is heavily dependent 
on its browsability and ease of use. 

As an Intranet administrator, you can think of your users as captive 
users. They have to access your site to work with administrative or 
technical data within your organization. However, putting up clun- 
ky Web pages that are difficult to browse will only make your users 
reluctant to access them. 

Some of the topics that we’ll discuss relevant to your site’s brows- 
ability include: 

□ Effective use of browsing navigation tools 

□ Tips for effective HTML design 

□ Effective use of lists 

□ Creative uses of graphics in your pages 

□ Creative design of tables 
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An Efficient Web Site 

So what are the qualities of an efficient Web site? First, there should 
be a compelling reason to visit the site. Users within your Intranet 
will be looking for relevant information on your Web site. Second, 
effective sites use some navigational and layout design techniques 
that we’ll discuss in this chapter. They are easy to navigate, and 
when you get lost, there’s always a link back to the previous page 
or back to the home page. Let’s discuss some of these techniques. 

Maxing Out on HTML 

As a text processing language, HTML 2.0 is fairly limited in fea- 
tures. With HTML 3.0 still in the proposal stage as of this writing, 
it seems that the Web community will need to find ways to creative- 
ly use HTML 2.0 to display effective Web pages. 

Netscape HTML Extensions 

In Appendix C, “Perfecting HTML,” we will talk about the differ- 
ent flavors of HTML and how the Netscape extensions differ from 
standard HTML. With a huge market share and millions of dollars 
worth of stock behind it, chances are that Netscape Communica- 
tions will have a large say in the direction that HTML will take over 
the next few years. However, many people are nervous about what 
they see as a Netscape hegemony over HTML, similar to what Mi- 
crosoft has with operating system and office automation software. 
With Microsoft’s introduction of its Internet Explorer Web browser 
in early 1996, a whole new set of specific HTML extensions were 
introduced as well. With several different flavors of HTML being 
supported by major browsers, you will have to decide which set of 
extensions you will support within your Intranet. This will more or 
less dictate the type of browser upon which your users will have to 
standardize. 
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Although Internet Explorer accepts many of Netscape's HTML 
extensions, Microsoft has included support for extensions beyond 
those used by Netscape Navigator. Specifically, Internet Explorer 
enables you to play background sounds and display floating mar- 
quees on pages. For more information, see the URL at the end of 
this chapter. 

Having said that, the Netscape extensions can be pretty useful. 
Background GIFs and text colors add a new dimension to your 
page layout. Netscape Navigator was one of the first browsers to 
support HTML 3.0 tables. Despite the reviled <BLINK> environ- 
ment, Netscape has introduced some novel extensions, such as 
frames, which have been adopted throughout the Web. The current 
convention is that if you plan on using the Netscape extensions, 
notify your users in some way that non-Netscape browsers can in- 
terpret. The most common way is to include a GIF or announce- 
ment that you are using Netscape-enhanced HTML. The graphics 
in Figure 6.1 are often used in this manner. 



Figure 6.1 These images are often used to warn tisers of Netscape- 

enhanced pa^es. They can be found on Netscape's home papjes start- 
ing at http://www.netscape.com. 



The images in Figure 6.1 are often used to link to the Netscape 
Communications home page (http://www.netscape.com) so that 
the user can download a copy of the browser. Sometimes the 
icons are linked to an archived copy of the browser itself. The 
Netscape 2.0 icon is used to denote that the page uses Navigator 
2.0 features such as frames and Java applets. 
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When developing HTML pages, one good practice is to maintain a 
stable of browsers, such as Mosaic and MacWeb, to determine 
how compatible your Netscape-enhanced pages are with other 
Web clients. 



Realize that when you use the Netscape extensions, you are poten- 
tially using nonstandard HTML. If you have standardized upon 
Navigator as your Intranet’s standard Web browser, then your users 
should have no trouble with your pages. Many functions of the 
current Netscape extensions will be incorporated into the eventual 
HTML 3.0 standard. 



Using Lists Effectively 

Lists are one of the original and most heavily-used HTML environ- 
ments. The list environment is used to represent distinct items of 
information in an ordered format. HTML 2.0 offers little flexibility 
in setting up lists; the Netscape extensions offer few added features. 
We’ll discuss the three major list types: ordered lists, unordered 
lists, and definition lists. There are several guidelines that you 
should observe when developing HTML lists. 



NOTE 







I like to use the word tag to describe HTML commands such as 
<P>, <N0BR>, and <HR> that stand by themselves and need no 
complementing tag. I use the term environment to describe HTML 
commands that require beginning and closing tags. Headers 
(<H1 > . . . </H1 >) and bold type (<B> . . . </B>) are examples of 
what I refer to as HTML environments. Note that environments 
are denoted with starting and closing tags. 
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Using Ordered and Unordered Lists 

Ordered and bulleted lists are popular list environments. With stan- 
dard HTML 2.0, there are not a lot of options at your disposal. As 
a review, the Netscape HTML extensions allow you the following 
flexibility: 

□ Unordered list bullets can be made into hollow circles and 
squares instead of just the usual discs. 

□ Ordered list headings can be preceded with uppercase and 
lowercase alphabetic, uppercase and lowercase Roman numer- 
al, and numeric characters. 

□ Ordered list numerical prefixes can be set to start at any par- 
ticular number. 

Directory and menu lists are similar to unordered lists and do not 
provide much more functionality. 



Using Definition Lists 

Definition lists are useful for providing definitions of various list 
items. My favorite use for a definition list is to provide a description 
of a hotlist or list of links. An example of this is shown below in 
Figure 6.2 along with the associated HTML code. 

<H2>Example of a definition list of links</H2> 

<DL> 

<DT><A 

HREF= “ http : / /docs . kb . bib . dk / I nterviews /WWW/ Links / 

^Links . html">Net . Personalities</A><BR> 

<DD>lnterviews with various WWW and Internet 
^♦Personalities 

<DT><A HREF=“http: //www.webcrawler.com/”>WebCrawler</A> 
<DD>A Popular WWW Searching Tool 
<DT><A HREF=“http: //WWW. apple. com”>Apple Computer</ 
**A><BR> 

<DD>Apple Computer's Home Page 
</DL> 







Figure 6.2 The definition list can be used to present a descriptive 
list of hotlinks. 



Managing List Length 

One of the most annoying things I see on the Web is lists that go 
on and on forever. Long lists can be distracting and difficult to 
navigate. For the sake of readability, you should break up exceed- 
ingly long lists into separate pages. However, if you need to keep 
the list as a single entity, there are two ways to make it more read- 
able. 

The first way is to use anchors to index various portions of your 
text. In this way, you can sport a table of contents at the top of the 
page with links to the various list elements. An example of this is 
shown below in Figure 6.3 along with the associated code. 

<HTML> 

<HEAD> 

<TITLE>Indexed List Example</TITLE> 

</HEAD> 

<B0DY> 
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<1 - -header- -> 

This is an index to the list below. 

<DL> 

<DT>Click <A HREF="#1st“>here</A> for first element 

<DT>Click <A HREF="#2nd“>here</A> for second 

*»element 

<DT>Click <A HREF="#3rd“>here</A> for third element 

<DT>Click <A HREF="#4th“>here</A> for fourth 

^element 
</DL> 

<I - -end of header- -> 

<DL> 

<DT><H4><A NAME="1st”>First List Eleraent</A></H4> 
<DD>This item contains a lot of material about 
^the first element of this list. While you may think 
*»stretch lists are a little complicated, they are 
^actually quite simple when used with HTML Grinder. 
^They save space on your browser window. 

<DT><H4><A NAME="2nd">Second List Element</A></H4> 
<DD>This contains some information about the 
»»2nd list element 

<DT><H4><A NAME="3rd">Third List Eleraent</A></H4> 
<DD>This contains some information about the 
‘•2nd list element 

<DT><H4><A NAME=“4th“>Fourth List Element</A></H4> 
<DD>This contains some information about the 
‘•2nd list element 
</DL> 

</BODY> 

</HTML> 

In the index at the top of the page, you see a small definition list; 
each item has anchor tags that refer down to the items in the defi- 
nition list at the bottom of the page. By clicking on one of the links 
in the index, the browser window scrolls to the point where the 
referenced list item is at the top of the window. If you absolutely 
need to keep a list on one single page, this is a useful technique. 
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^ ^ ^ Netscape: IndeHed List EHomple 
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Fourth List Elamsnl 

This corsams some information abotx the 2nd list alemerx 



Figure 6.3 You can index HTML anchor tajfs to reference items 
in a list environment. 




The other technique is to use stretch lists as implemented by 
HTML Grinder. Stretch lists do not use the HTML list environ- 
ment, but are a means of making HTML mimic the behavior ex- 
hibited by the MacOS when you view folders by name. Stretch lists 
enable you to display the primary headings in a list format as shown 
in Figure 6.4. By clicking on a link, you can expand that list item as 
shown in Figure 6.5. 



The stretch list is actually a clever means of redistributing HTML 
text in a document. The HTML Grinder application has a Stretch 
List tool, or wheel, which allows you to build stretch lists. It’s an 
easy task to do. You first need to format your original document in 
a way that HTML Grinder can interpret. 
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Figure 6.4 A stretch list mimics the MacOS View by Name 
paradigm. 
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Figure 6.5 By clickinp on a link, you can expand that list item on 
a stretch list. 
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The following code contains a simple list that we are going to crank 
through the HTML Grinder. 

<! • -header- -> 

<H3>This is a general introduction to developing 
'♦stretch lists with the HTML Grinder Stretch List 
‘•Wheel. Some examples of this are given at</H3> 
‘»<BR><TT>htt p : / /WWW . matte rform . com / legend / 
stretchexamples.html</TT> 

<HR> 

<1 - -end of header- -> 

<H4>First List Element</H4> 

This item contains a lot of material about the first 
‘•element of this list. While you may think stretch 
•♦lists are a little complicated, they are actually 
‘•quite simple when used with HTML Grinder. They save 
‘•space on your browser window. 

<H4>Second List Element</H4> 

This contains some information about the 2nd list 
‘•element 

<H4>Third List Element</H4> 

This contains some information about the 2nd list 
‘•element 

<H4>Fourth List Elemen</H4> 

This contains some information about the 2nd list 
‘•element 

<! - -footer- -> 

<HR> 

That's all folks! ! ! 

<1 - -end of footer- -> 




Before you use the HTML Grinder to make a stretch list, make 4 
backup of your HTML code, because the stretch list creation is not 
undoable. 



You need to define the stretched and nonstretched versions of the 
document using header and footer comments. You also need to 
denote your primary list headers in some sort of environment; this 
environment can be a heading, a physical or logical markup, or any 
other closed set of tags. The environment needs to be unique to 
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the desired list headers in the document. In the preceding example, 
<H4> tags were used. 

Take your file and drag it onto the HTML Grinder application. 
From the Tools menu, select the Stretch List option. A dialog box 
appears, similar to that shown in Figure 6.6. You need to specify 
which environment you used to designate your primary list head- 
ings. You also need to specify the comment strings you used to 
denote the beginning and end of your headers and footers. Lasdy, 
you can specify your expanded and condensed item icons. The 
HTML Grinder has two default icons, similar to the MacOS list 
icons, in the Grinder Tools folder. Move or copy these icon files 
(they’re only 9K) over to your HTML code folder. Press Create 
Stretch List to create your stretch list. 




The HTML Grinder will ask you for a serial number if you have not 
registered the software. It will allow you to create a stretch list 
while In demo mode, but this grace period will expire within a few 
weeks. As with all shareware on the CD-ROM, purchase of this 
book does not fulfill your shareware obligation. 



stretch List i 



[ Select Condensed Icon... ] 

[ Select EHpBndBd Icon... ] 

Format for title of each element: .itiffe 

Header tags: Footer Tags: 



ft f JE wt tC r i 

|[ Create Stretch List ]] 

7 Unr»9ts1trtd D*fno Copg 



Figure 6.6 The HTML Grinder Stretch List dialog box allows you 
to create stretch lists. 



Your HTML file will be converted to represent an unexpanded 
stretch list as shown in Figure 6.5 with your primary item headers 
transformed into hypertext. The Grinded code in the new HTML 
file is given here: 
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<title>10FI604</title> 

<! - -header- -> 

<H3>This is a general introduction to developing 
^♦stretch lists with the HTML Grinder Stretch List 
‘•Wheel. Some examples of this are given at</H3> 
<BR><TT>http : / /WWW. matterf orm . com/legend/ 
stretchexamples.html</TT> 

<HR> 

<! --end of header- -> 

<p> 

<img align=center src="condensed.gif ”> <a 
‘•href="10FIG041 .html">First List Element</a><p> 

<img align=center src="condensed.gif "> <a 
‘•href=“10FIG042.html">Second List Element</a><p> 

<img align=center src=“condensed.gif “> <a 
‘•href="10FIG043.html“>Third List Element</a><p> 

<img align=center src= "condensed. gif “> <a 
^href=“10FIG044.html">Fourth List Element</a><p> 

<! - -footer- -> 

<HR> 

That's all folks!!! 

<! - -end of footer- -> 

Clicking on any of the item headers will give the appearance of 
expanding that list item as a new page appears with an expanded 
icon replacing the condensed icon and the list item text appearing as 
well. What has actually happened is that the HTML Grinder has 
created an additional page for each expanded link. These additional 
pages contain the original list with one item expanded. In the imex- 
panded list, these list headers point to associated additional pages. 
The Stretch List is a clever and very useful means of maintaining 
large lists. 




Because of the mechanism that HTML Grinder uses to expand list 
items, you can expand only one item in a stretch list at a. time. 
This may prove useful for large lists, because it means your page 
will never grow to undue lengths. 
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Using Tables Effectively 

Even under HTML 2.0, tables can be a highly flexible means of 
displaying information. Once again, the Netscape extensions allow 
greater flexibility in table definition. 

Setting Table Borders 

HTML 2.0 enables you to set up tables with borders; Netscape 
enables you to display these tables with various border widths. 
Thick borders can be especially eye-catching. Some examples of 
thick table borders are shown in Figure 6.7. Borders are also an 
interesting way to frame certain graphics. The picture in Figure 6.8 
is framed with a 5 -pixel border. 
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Figure 6.7 Table borders can be constructed with various widths 
using Netscape HTML extensions. 
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Figure 6.8 Tou also can use the Netscape table border capability 
to frame images. 




Tables also can be used to align images. You can create a table 
without borders and include an image or icon in each cell. They 
will appear to be aligned with one another. This is most noticeable 
by including images of equal size. 




Similarly, you can use tables to align columns of text to pictures. 
Check out examples of this in the Salon e-zine at http:// 
www.salon1999.com. 



Using Graphics Effectively 

The Internet has been serving text documents for a long time; the 
appeal of the Web, however, is that you can integrate text and 
graphics on the same page. This new flexibility enables you to cus- 
tomize the look of your pages. The tips we’ll cover in this section 
will enable you to supply graphics that add style to your docu- 
ments, while ensuring their browsability. 
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Using Imagemaps 

We’ve talked about the utility of imagemaps. Not only can they 
provide a compact means of setting up links to different pages, but 
they can provide an attractive addition to your page’s layout. Im- 
agemaps, such as the one shown in Figure 6.9, can be decorative 
and iiseftil at the same time. 
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Figure 6.9 The Point Communications home pa£je sports an at- 
tractive ima£iemap as a means of accessing other pages on the site. 



In addition to making your page a whole lot prettier, imagemaps 
can add insight into your page more effectively than simply string- 
ing up links using HTML. An example of this is shown in Figure 
6.10. In diis example, you can click on various geographic locations 
on a map of the United States to obtain more information on tiie 
various NASA centers. For example, you would click on an area of 
the map near Houston, Texas, to obtain more information on the 
Johnson Space Center located in Houston. In this way, the user 
gains insight into the location of the different NASA centers more 
than if the NASA center links were posted in a table or an unor- 
dered list. 
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Figure 6.10 This imagemap from the NASA Web site lets you 
click on £feo£fraphic locations on the U.S. map to obtain more infor- 
mation on the various NASA centers. 



The HTML 3.0 proposals also provide use for client-side 
imagemaps. With conventional, or server-side,, imagemaps, die 
user clicks on an area of the map. The browser sends the location 
of the click to die Web server which in turn relays this information 
to a special application known as a CGI script. This script translates 
the coordinates of the map click to a URL and passes the URL 
back to the server. The server processes the URL and returns the 
corresponding HTML back to the browser. With client-side im- 
agemaps, the server is left out of the picture. Association betivcen 
areas of the map and associated URLs is made within the HTML 
code. Many experts feel that client-side imagemaps present more 
utility in that they are faster because the server is not called into 
action. Similarly, you can test client-side imagemaps offline when 
you don’t have access to a server. 
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See Chapter?, "Writing CGI Scripts," for more information about 
imagemaps and CGI scripts. 



Alternatives to <HR> 

We’ll talk about the importance of modularity in your documents. 
One way to break up the flow of text in your pages is to use the 
horizontal rule as discussed in Chapter 5. However, there are 
graphical alternatives to the horizontal rule. These graphics are 
usually transparent and because they are small in size, take very 
little time to load. An example of some of these horizontal-rule 
alternatives is given in Figure 6.11. 




Figure 6. 11 These transparent GIFs can be used as alternatives to 

HTML’s horizontal rule. 







You can check out Yahoo's list of icon archives at http:// 

www.yahoo.com/Computers/World_Wide_Web/Programming/ 

Icons/. 
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Using Background and Text Colors 

Netscape 1.1 introduced the capability of modifying colors of the 
browser text and background window; you can even set up an 
image to serve as a background to your browser window. These 
features were initially supported only by Netscape, but the latest 
version of Mosaic now accommodates these HTML extensions as 
does Microsoft’s Internet Explorer. Soon after Netscape 1.1 was 
released, the Web exploded in a collage of bizarre colors and graph- 
ics. These graphics reduced the legibility of these documents below 
the level of comprehensibility. It didn’t take long for people to find 
the right RGB codes to produce green text on a bright orange 
background. 




If you find the different graphical backgrounds annoying, there's 
hope. Many browsers, such as Navigator and Internet Explorer, 
enable you to override the background colors and graphics with a 
preset color scheme. 



In the early Macintosh development, studies showed that the text 
and background color combination that was easiest for people to 
read was the conventional black on white. Recent studies by graph- 
ics designers have confirmed these results. You can use color com- 
binations different from this optimal configuration with only a 
minimal loss of readability. First, let’s talk a litde bit about the way 
these colors are formed. 

One way to establish a particular color is to describe its relative 
amounts of pure red, green, and blue components. This scheme, 
known as the RGB (Red, Green, Blue) color scheme, enables you 
to precisely define a particular color. The MacOS enables you to 
specify the relative amount of each component using a relative scale 
of 0 to 65535. For example, the Apple Color Table defines pure 
white to consist of a relative scaling of 65535 for all three compo- 
nents; in contrast, black has a 0 relative scaling for all three compo- 
nents. 

As mentioned previously. Navigator uses the same RGB convention 
to specify text and background colors. However, the relative scaling 
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of the red, green, and blue components is specified using hexadeci- 
mal (or base 16) codes instead of decimal (conventional base 10) 
representations. As a result, there are far fewer possible color com- 
binations using the Navigator system than there are using the Apple 
Color Table. 




Hexadedmal numbers are often used in computing applications 
because they describe a base 1 6 number system. Our standard 
number ^stem is base 10. The hexadedmal system usesithe famil- 
iar base 10 numbers and then uses a combination of alphabetic 
characters to describe nurnbers equivalent to 1 1 through 16. 



1 have found that light pastels are best for background colors be- 
cause they offer the best contrast with text. You can determine a 
pastel by noting that two of the indices will contain quite similar 
values, while the third contains less similar values. For example, a 
light cyan contains 50 percent red, but full green and blue. This 
translates to a background color code of 7FFFFF (the number FF is 
a hexadecimal number representation). In contrast, a harsh green 
that contains neither red nor blue corresponds to a code of 
OOFFOO. I find the stronger colors to be useful for text and the 
lighter shades acceptable for background colors. The important 
thing to remember is to provide enough contrast between your text 
and background to ensure legibility. 



NOTE 




ColorMeister is an application that you can use to determine the 
Navigator color codes. You can use either the standard MacOS 
color wheel or RGB guide to express a color in its hexadedmal 
equivalent 



With these HTML extensions, you also can change the colors of 
active, visited, and unexplored links. Since Mosaic’s introduction 
several years ago, the convention has been to assign unexplored 
links a royal blue with visited links displayed in a magenta color. 
Surprisingly, this convention is maintained on a lot of pages even 
when the body text is a different color. This possibly results from 
the fact that the link colors tell you something about the status of 
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the link, whereas normal text color is simply decorative. The only 
rule of thumb I would suggest is to not reverse the link color con- 
vention. I have seen some pages where visited links are blue and 
unexplored links are red. This can be very confusing even to veter- 
an Web surfers. There are aesthetic reasons for changing the link 
color convention, but the contrast between explored and unex- 
plored link colors should be large enough to dispel any ambiguity. 

Background images are used in lieu of background colors. Desktop 
texture utilities have been around for several years; these utilities 
enable you to replace the standard desktop with images or custom- 
ized patterns. System 7.5 even comes with a desktop pattern con- 
trol panel. Again, the point is to provide enough contrast between 
text and background to make the document legible. The most legi- 
ble documents use backgrounds that are semitransparent or use 
muted hues. Figure 6.12 shows two examples of text and back- 
ground images. The first example shows a muted gray background 
that is easy to read; but the second window is more difficult to 
read, because there is litde contrast between the text and the im- 
age. To make the document readable, a white, or similarly contrast- 
ing, text color should be used. 




A link is active when yoii click on it or activate if. Note tfiat the 
color changes from its original color when you click on a link, the 
link describing the Netscape HTML extensions is given atlhe end 



of this chapter. 



GIF versus JPEG 

Two major graphics formats are published on the Web at this time: 
the Graphics Interchange Format (GIF) and the Joint Photograph- 
ic Experts Group (JPEG). Originally, Mosaic did not support the 
JPEG format, and such images had to be viewed offline; the only 
images you could view in a browser window were GIF images. The 
original version of Netscape supported inline JPEG displays; be- 
cause other browsers now do this, there’s a legitimate question as 
to which format you should be using. 
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How easy is it to read this text? It^s important to have 
enough contrast between your text and your 
background images. If not, no one will be able to read 
yonr pages. 



Nettcape: 1960's Dots 



Figure 6.1 2 The pO£fe on the top is readable because of the contrast 
between the text and back£jround image; for tpje same reason the 
page on the bottom is not easily readable. 
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The JPEG format was developed for displaying photographs; you 
can support 24-bit color with a JPEG image. This is useful only if 
your monitor supports 24-bit color. This gives almost photographic 
quality to inline images viewed within a browser. GIF files, on the 
other hand, support 8-bit color yielding 256 possible colors in an 
image. This is fine for clip art, but insufficient for photographs. 

JPEG was also designed with a very efficient compression scheme 
to reduce the size of large photographic files. This scheme works 
well with photographic images, natural scenery, or any other com- 
plex image. JPEG does not work so well for some line art, lettering, 
or simple images. This compression scheme is designed to exploit 
the weaknesses of the human eye; people can perceive small chang- 
es in brightness far more accurately than they can detect small 
changes in color. Therefore, artwork with sharp contrasts can look 
blurry and indistinct. However, image quality also depends on the 
level of compression and whether the art has been anti-aliased. 




GIF files can better display iniine alphanumeric characters at sm 
sizes, meaning GIF Is the preferred formatior Imagemaps, 



On the other hand, the GIF encoding scheme is very efficient at 
compressing images that have large patterns of similar color, such as 
icons or cartoons. JPEG cannot compress such imagery as efficient- 
ly. GIF compression can be lossless when working with small files; 
JPEG tends to lose image quality with each image compression. A 
JPEG image is expanded and compressed each time it is edited with 
a graphics application such as GraphicConverter or Adobe Photo- 
shop. This degree of loss can be traded off with the final image size 
using one of the applications previously mentioned; even so, the 
degree of quality loss is generally less than human perception. 

So the question still is: which image format should I use? The rule 
of thumb is to use GIF files to store images of simple icons, line art, 
imagemaps, and especially any form of black-and-white artwork; 
use JPEG to store complicated imagery such as photographs and 
artwork. For complicated images, you receive better quality and 
smaller files with JPEG than with GIF. 
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NOTE , The quality of color inherent in an image is related to the size of 
w the computational word used to describe the number of colors 

available to express each pixel. For example, say that you want to 
display a piece of dip cirt in black and white. You would assign 
one bit for each pixel — if the bit is on, the pixel is white and if it's 
off, the pixel is black. With more bits per pixel, you can describe 
various shades of gray or colors. With 24-bit color supported by 
JPEG, you can theoretically describe 2^“, or 16,777,216 colors in a 
JPEG image. Naturally, the more color you describe in an image, 
the larger your file will need to be. Eight-bit color files are much 
smaller than files containing images described with 24-bit color. 



Photographs versus Clip Art 

Ever wonder why it takes so long to download certain graphics 
files? The short answer is that some files are larger than others. 
Fundamentally, downloading text and graphics through the Web is 
a file transfer using HTTP. The larger the amount of text and 
graphics you download, the longer the transfer will take. The ques- 
tion is, why are some graphics files larger than others? Much of it 
has to do with the size of die graphic and the format, GIF or 
JPEG, in which it is saved. A navigation arrow may be a couple of 
kilobytes, but a photograph, which can take up more space in your 
browser window, may be stored in a larger file. 

Much of the difference results in the way that the graphic files are 
stored. A GIF file supports limited numbers of colors and therefore 
requires 8 bits per image pixel to describe the image colors. Fur- 
thermore, the GIF encoding algorithm works much better with 
color patterns; space can be saved by using an algorithm to describe 
color patterns. In contrast, a photograph can have no discernible 
pattern of color, making it difficult to condense using an encoding 
scheme. 

As a result, clip art and drawings that use few colors require less file 
space than photographs. When there’s a choice, rig up your own 
clip art for mundane uses as navigation buttons and banners; store 
these images using GIF files as previously mentioned. Use photo- 
graphs only when they contribute to the content of the page. 
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Your page will load more quickly if you minimize the number of 
images on the page. The browser sets up a separate HTTP connec- 
tion for each image, so there's extra overhead involved with start- 
ing up each connection in addition to the actual image transfer. 



Overall Page Design 

To create a truly browsable Web site, you’ll need more than snazzy 
graphics and HTML tricks. You’ll need to organize your pages into 
a format that is accessible by the reader. The tips in this section 
detail some of the ways you can organize your pages into an acces- 
sible format. 



Modularizing Your Pages 

Maybe I’m stuck in the remote-control generation, but I have trou- 
ble with pages that are more than three browser screens long. For 
one thing, it’s hard to keep track of excessively long material and 
the page, with associated graphics, takes too long to load. Just as 
you limit the length of your paragraphs, you will want to limit your 
individual Web documents to no more than three screens. 



NOTE 







To design your pages in a modular fashion, you can use Clay Bas- 
ket. The application contains an outline tool that aids you to de- 
velop interconnecting pages. HTML Grinder also has a Sequential 
Linker tool that enables you to set up navigational hypertext to 
connect existing HTML pages. 



You also can use horizontal rules, tables, and figures to break up 
the flow of your document. The idea of publishing Web pages is to 
utilize the media to the fullest extent possible. If your document is 
too long and text-based, you might as well publish it on a Gopher 
or FTP archive. 
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Publishing Online Documentation 

One of the main uses of your Intranet Web server will be to publish 
a document of some type, such as a software manual, a technical 
paper, or a list of frequently asked questions (FAQs) for the benefit 
of your readers. With diese types of documents, you’ll want to 
break it up into sections or modules as described previously. How- 
ever, you may want to allow users to download copies of the docu- 
mentation in a single file rather than require them to repeatedly 
browse the same pages on your site. For this reason, you may want 
to store the document in a single file written in a cross-platform 
format, such as PostScript or Portable Document Format (PDF). 
Providing this documentation in a single file enables users to make 
hard copies of the material if they desire; in addition, it can lighten 
your server load a bit. 




Adobe Systems, Inc. has introduced the Portable Document For- 
mat for use as a cross-platform document format. You can view 
PDF files with the freeware Adobe Acrobat Reader utility. PDF files 
are created by high-end applications such as FrameMaker or Ado- 
be Acrobat Pro. You can convert PostScript files to PDF using 
Adobe Acrobat Distiller. You can even use the Acrobat Netscape 
Navigator plug-in module, which enables you to read PDF files 
within Navigator pages. See Adobe's home page for more informa- 
tion (http://www.adobe.com). 



Navigation Tips 

Another feature of browsable Web pages is tlie ease of navigation. 
If your Intranet Web pages are going to contain diverse types of 
information, chances are you’ll have several sets of pages relating to 
different topics. You may have them set up in a complicated hierar- 
chy that seems logical to you, but unfamiliar to your Intranet users. 
You also have to provide for the fact that many of your users will 
not be hitting your home page and may be barreling into some 
obscure location within your site. If your pages are disjointed and 
difficult to traverse, users will get frustrated. In this section, we’ll 
discuss ways that you can make your site more navigable. 
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Your users will probably hop from page to page within your site. 
Well, that’s great, but ideally, you want them to know^ where 
they’re hopping. This can be done with some sort of navigation 
buttons. For example, the pages in the Web site shown in Figure 
6.13 have a series of navigational buttons for the user to move 
through documentation. Note that die buttons enable you to move 
forward and backward by page or by section. 
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Figure 6.13 The WehLib project (http://selsvr.stx.com/-weblib/) 
Web pa^es use a series of navi£fational buttons to enable users to step 
throu£fh the online documentation. 

The page in Figure 6.13 utilized different images for different com- 
mands. You can place the same functionality within an imagemap. 
Figure 6.14 show^s an example of a navigational image used in the 
Apple Computer home page. The image is broken up into several 
areas that are linked, by an imagemap script, to various pages. 

An important feature to note from both examples is that you 
should always include a link to the home page in your navigational 
display. If users become lost in the bowels of your Web pages, they 
can always come back to the top level by hitting a link to the home 
page. Having a home page link on all your pages enables users to 
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start at the top, where you might have additional informadon 
available. 
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Figure 6.14 The Apple Computer home pastes use a navigational 
imagemap to enable users to move to different portions of the site. 




Some of your users will have image loading turned off; also, trans- 
mission problems may prevent graphics from loading accurately at 
times. For either reason, you will want to have a hypertext version 
of your navigation buttons available somewhere on the page. 

Similarly, you should include a text description of your images 
using the ALT keyword. An example is given below: 

<IMG SRC="me.gif" ALT="Picture of me in bathing suit"> 

If me.gif does not load for some reason, the Web browser will 
display the text in the ALT tag instead. 
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Providing Credit Where Credit Is Due 

If your users have questions on your content or your Web-site or- 
ganization, you should provide a means for them to contact you. 
Your organization may be large enough that not all of the users 
might know you by name or email. You should identify yourself by 
name and email address in the footer of each of your pages. Setting 
up an email hypertext link is simple through use of a mailto HTML 
tag. If your organization allows you the privilege of a personal 
home page, include a link to your page; you can provide more de- 
tailed locator information on the home page. 



NOTE 




If you are reluctant to publish your name or email address bn your 
Web pages, set up an email account so that you can receive mail 
at webmaster@hostyour_domain_name. Identify this address on 
the page as a means of providing feedback to you. We’ll talk more 
about setting up these lypes of accounts in Chapter 11 , "Eraeuj 
Services." 



Maintain Fresh Links 

Using administration tools such as Clay Basket, it will be difficult 
for you to publish stale links within your own document. Some of 
the HTML validation services mentioned in Appendix C, ‘‘Perfect- 
ing HTML,’’ will check your internal links for you. If you are going 
to maintain links to pages located outside your Web site, you need 
to prepare against publishing stale links. You should constantly 
check to see that your links go to the correct places. 

Adobe is distributing SiteMill, a site management tool for Web 
administrators. SiteMill provides a means of testing the connections 
between your links and is specifically geared to managing large 
sites. Like Clay Basket, SiteMill presents you with an outline view 
of your Web site. However, SiteMill enables you to check for the 
accuracy of your links. When you change the name of a file, 

SiteMill will warn you of the number of documents that will need 
to be updated as a result of that change. 
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NOTE A stale link is a hypertext link of some sort that points to a nonex- 

w isteht page. Most Web servers produce a default error page when 

reiquests for errorieous or stale links are made. 

Tips for Keeping Your Users' Interest 

Okay, now you know your Intranet users are going to be using 
your Web pages because they’re told to do so. Still, you want to do 
things to increase acceptance of your pages within your organiza- 
tion. In a sense, you are marketing your pages to your organization. 
If they arc hard to use, uninteresting, or unusable, you may see 
your Intranet waste away from disuse. 

Much of the information you post on your Intranet Web pages will 
be administrative; you’ll have to think hard about how to make that 
material presentable. The tips discussed in this chapter should help. 
Beyond that, there are some things you can do tliat will personalize 
your pages to gain acceptance within your company. 

Spotlight People and Organizations 

You can prepare little reports on people or groups within your or- 
ganization. These are similar to “up-close-and-personal” interviews 
that you find published in many company newsletters. You can 
include photographs and even recorded greetings from these indi- 
viduals. If you want to highlight a certain group, you can discuss 
members of the group or even publish a group photograph. 

Change the link periodically and watch your users vie for the spot- 
light! 

Social Calendars 

Your organization might sponsor social events. Publish a listing of 
these events whether they involve Christmas parties, summer barbe- 
cues, or trips to local sports events. You also can think about post- 
ing links regarding events that are of local interest to employees 
within your company. 
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Publishing Cool Links 

Keep a list of hotlinks handy that are relevant to your users’ inter- 
ests. You may want to keep links to Yahoo, Infoseek, Alta Vista, or 
some of the other popular search engines. You also can publish 
links to companies or organizations that have similar interests to 
your own. 

Summary 

There are two keys to keeping your site on the cutting edge: know 
your audience and keep browsing the Web. By knowing your audi- 
ence, you know what to publish and how to publish it. For exam- 
ple, you may be developing Intranet forms and Web pages for use 
by your nontechnical administrative staff. You will need to design 
these pages differently than if you develop pages targeted for scien- 
tists and engineers. There will be varying levels of computer exper- 
tise in your organization, and you will need to customize your 
content to reflect the understanding of your specific Intranet users. 

Second, by surfing the Web, you can get information about what’s 
hot and what’s not. Many times, I will see pages that will make me 
ask, “How did they do that?” Downloading the HTML source 
code usually answers that question. You can learn more about prop- 
er HTML style and design by looking at links to related pages than 
you can from using almost any other source. 

Your Intranet users are more or less captive users. They’ll have to 
use your site if you post administrative applications that they’ll need 
to use. However, your site will gain more acceptance within your 
organization if you structure the content in a way that makes your 
pages easy to browse. 

We’re ready to talk about CGI scripting in the next chapter. We’ll 
discuss some of the scripting environments available to you on the 
Macintosh including AppleScript, Frontier, and MacPerl. I’ve even 
included some simple examples. If you want to skip the next chap- 
ter, you can jump to the following chapters; however, CGI scripts 
will greatly enhance the services that you can offer your users, so I 
recommend that you read that chapter at some point. 
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□ Chapter 8, ‘‘Databases and Document Searches,” to learn 
about how to allow your Intranet users a means of accessing 
your databases and searches document archives. 

□ Chapter 9, “Beyond HTML,” to learn about ways some tech- 
niques spruce up your Web site beyond just using convention- 
al HTML and graphics. We’ll discuss Java, RealAudio, and 
other cool topics. 

□ Appendix C, “Perfecting HTML,” to learn about HTML 
editors as well as some new and advanced HTML techniques 
such as frames and server-push/client-pull techniques. 



Links Related to This Chapter 

World Wide Web Consortium http://www.w3c.org 

HTML Proposals, Specs, and Other Info http://www.w3.org/ 

hypertext/WWW/Mark- 

Up 

Tips on Writing HTML http://www.ncsa.uiuc.edu 

Beginner’s Guide to HTML /demoweb/html- 

primer.html 

Composing Good HTML http://www.cs.cmu.edu/ 

-tilt/cgh/ 

Guides to Writing HTML Documents http://union.ncsa.uiuc. 

edu:80/HyperNews/get/ 

www/html/guides.html 

Netscape HTML 2.0 Extensions http://home.netscape 

.com/assist/net_sites/ 
html_extensions_3 .html 

Netscape HTML 3.0 Extensions http://home.netscape 

.com/assist/net_sites/ 
html_extensions_3 .html 



Microsoft HTML Extensions 



http:/ /www.microsoft 
.com/ie/author/html- 
spec/html_toc.htm 
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JPEG FAQ 



Adobe Systems, Inc. 
Usenet 



http://www.cis.ohio- 
state .cdu/hypertext/faq/ 
uscnet/jpeg-faq/top.html 

http : //www.adobe .com 

comp .infosystems 
.www.authoring.htmI 
comp.infosystems. 
www.authoring.images 
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By now, you know enough to get your server up and running. You 
can create and publish HTML documents and display images. This 
is important, but your Intranet will require more advanced capabili- 
ties. Your pages need to do something. You know, search databases, 
compile HTML form data input, and even keep track of page ac- 
cesses. As an Intranet administrator, your Web services need to be 
more specialized and more feature-oriented than what is seen out 
on the Internet. 

It’s time to talk about creating dynamic documents on your Intra- 
net. One of the earliest means of creating documents on-die-fly is 
through the use of the Common Gateway Interface (CGI). Using 
CGI scripts, your server can interact with third-party applications 
that can execute document searches, query databases, or return a 
dynamically created HTML page. These types of services give a 
professional bearing to your Intranet. 

This chapter discusses how CGI scripts can be implemented on 
your Macintosh Intranet Web server. Specifically, it covers the fol- 
lowing topics: 

□ A brief introduction to the Common Gateway Interface 

□ A discussion of how you can implement CGI scripts using 
MacPerl, AppleScript, and Frontier 

□ A look at some Server Side Includes that are used to extend 
functionality to your pages without using CGI scripts. 
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The emphasis of this chapter will be on developing the kind of 
knowledge that you can use to customize your Intranet Web 
service. 

The Common Gateway Interface 

Typically, Web servers respond to requests from Web browsers in 
the form of HTML documents and images. The browser sends a 
URL to the server, and the server sends the file — ^whether it’s an 
HTML document, GIF or JPEG graphic, audio file, or movie — to 
the browser via an HTTP connection. Sometimes, the browser 
sends a URL that does not point to a document, but instead points 
to an application. The server activates this application which then 
responds to the browser with the requisite information. This appli- 
cation is referred to as a CGI script. This section covers how this 
script interacts with the Web server and browser. 

Basic Scripting Concepts 

The process through which the Common Gateway Interface works 
is quite simple. The following steps detail the process through 
which output is returned to a form request. 

1. The browser accumulates data from an HTML form and pre- 
pares it for transmission to the Web server. 

2. The Web server extracts the CGI application name from the 
URL and activates the application. 

3. The Web server transfers the information from the HTML 
form to the CGI application. The data is transferred into a 
format that is readable by the CGI script. 

4. The CGI script processes the form data and prepares a re- 
sponse. This processing can include a database query, a nu- 
merical calculation, or an imagemap request. The response is 
usually in the form of an HTML document. However, the 
response is cleverly phrased by the CGI application to con- 
vince the Web browser that it originated from the server. In 
addition to just sending an HTML document in response. 
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CGI scripts can send mail, update a guestbook, or almost any 
task that you can accomplish dirough clever programming. 

5. The CGI application passes the response to the server, which 
immediately redirects it to the Web client. The server does not 
process the response in any way. 

This process is oudined in Figure 7.1. Note that the server merely 
passes information to the script. The script receives the data from 
the Web server through some mechanism unique to the language 
in which the script was developed. As long as this mechanism is in 
place, any programming language can be used to implement a CGI 
script. 



Host Computer 




Web Client 



Figure. 7.1 The Web browser transfers HTML form data to CGI 
scripts. These scripts process the data and return some form of re- 
sult j usually another HTML pa^e. 
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How to Trick a Web Browser 

Web browsers communicate with Web servers via the HTTP proto- 
col. Not only does tliis protocol specify the physical packet struc- 
ture of the protocol, but it also defines the manner in which the 
server and browser exchange information. For example, a Netscape 
Navigator client might send the following text to a Web server for a 
simple file request: 

GET /test23.html HTTP/1.0 
Accept: text/html 
Accept: www/source 
Accept: image/gif 
Accept: image/ jpeg 

User-Agent: Mozilla/2.0 (Macintosh; I; PPG) 

. . .a blank line. . . 




See Chapter 4, “Macintosh HTTP Servers," for a more in-depth 
discussion on the MIME encoding protocol. 



GET /test23.html HTTP/1.0 

This message header informs the server that the browser is looking 
for the file text23.html and intends to use version 1.0 of the HTTP 
specification. 

Accept: text/html 
Accept: www/source 
Accept: image/gif 
Accept: image/ jpeg 

The browser then informs the server as to which file formats it can 
interpret. In the above message, this list is truncated from what 
browsers usually express, but the server is informed that the client 
can interpret several text and graphics MIME types. 

User-Agent: Mozilla/2.0 (Macintosh; I; PPG) 

The browser then informs the server as to its brand of client; in this 
example, the browser is defined as Netscape Navigator. 
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Finally, the browser passes a blank line to complete the request. 

The server will respond with a message generally like the following: 
HTTP/ 1.0 200 OK 

Date: Thursday, 01 -Feb -96 19:15:32 GMT 
Server: MacHTTP 
MIME -version: 1.0 

Last -modified: Friday, 21 -May -96 14:11:08 GMT 
Content -type: text/html 
Content -length: 7562 
. . .a blank line. . . 

<HTML><HEAD><TITLE>Article 

In this response, the server provides enough information to allow 
the browser to process the requested data. This response can be 
analyzed line by line. 

HTTP/ 1.0 200 OK 

The server denotes that it too is providing data using the HTTP 
v.1.0 protocol. Furthermore, it returns an HTTP code of 200 OK 
which tells the browser to relax and that the requested file was not 
only found, but is being returned in this message. 

Date: Thursday, 01 -Feb-96 19:15:32 GMT 
Server: MacHTTP 

The date and server type are described in the header. The server 
type is included because the browser may interpret certain features 
not described in other servers. 

MIME -version: 1.0 

The server tells the Web client which version of MIME encoding is 
being used, so that the browser can reprocess the data. 

Last -modified: Friday, 21 -May-96 14:11:08 GMT 
Content -type: text/html 
Content -length: 7562 
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The browser is also informed as to the MIME type of the data and 
the size of the file; this last datum is important because as it allows 
the browser to inform the user as to the progress of the data trans- 
fer. After inserting a blank line, the server returns the file data. 

The server needs to be flexible enough to provide the file in a for- 
mat that is accessible to the client. For example, the server would 
need to provide a GIF file if a browser, which could only process 
GIF files, requests a file that is offered in JPEG. 




The client and server header formats are defined in RFC 822. 

The Internet Engineering Task Force (IETF) maintains an archive of 
all active Request for Comment (RFC) documents at http:// 
ds.intemic.net/ds/dspg2intdoc.html. 



As mentioned previously, the HTTP server doesn’t process output 
from a CGI application; the response is merely fimneled through 
the server back at the browser. The message, however, must be 
configured so as to conform to the HTTP message header 
specifications. 

Using Forms to Talk to the CGI Script 

By using an HTML form page, you can allow users to enter data 
that is processed by a CGI script. As discussed earlier in this book, 
users can enter text and specify options using forms developed with 
HTML. The types of data input options are as follows: 

□ Checkboxes 

□ Multiline text entry fields 

□ Popup selection menus 

□ Radio buttons 

Figure 7.2 shows an example of an HTML form that you can use 
to transfer data to a CGI application. Note that this sample page 
contains text, checkboxes, and radio buttons. The HTML code for 
this page is shown following: 
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<HTML> 

<HEAD> 

<TITLE> 

Forms Test 
</TITLE> 

</HEAD> 

<BODY> 

<FORM ACTI0N= " http : / /hoohoo . ncsa . uiuc . edu/cgi - bin / 
^post- query" METHOD=POST> 

A normal text field: 

<TEXTAREA NAME=" comment si "></TEXTAREA><p> 

<HR> 

<DL>Please Indicate your favorite holiday: 

<DD> 

<INPUT TYPE="radio" NAME=" holiday" 

«»VALUE="Christmas">Christmas 

<DD> 

<INPUT TYPE=" radio" NAME=" holiday" 

»»VALUE= " Thanksgiving “ >Thanksgiving 
<DD> 

<INPUT TYPE=" radio" NAME=" holiday" 

^VALUE="Easter“>Easter 

<DD> 

<INPUT TYPE=" radio" NAME=" holiday" VALUE=“NYDay">New 

‘^Year's Day 

</DL> 

<DL>Please put a check next to the applications you 
*»own: 

<DD> 

<INPUT TYPE=" checkbox" NAME=”msword" VALUE="No" 

^CHECKED>Microsoft Word 

<DD> 

<INPUT TYPE=“ checkbox" NAME=“photoshop" 

»»VALUE="No">Adobe Photoshop 

<DD> 

<INPUT TYPE=" checkbox" NAME=“ netscape" 

»»VALUE= “ NO " >Net scape 
<DD> 

<INPUT TYPE=" checkbox" NAME="excel" 
*»VALUE="No">Microsoft Excel 
</DL> 

<INPUT TYPE="submit" VALUE=“Submit This Form"> 
</FORM> 

</BODY> 

</HTML> 
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Anonndteatald; join, (nfT)| $ 



Pk«s8 mdbc«te ^rour (vrortt hohdiT: 
QCloistmAS 
wThfislugmog 
Q Easier 

ONev Year’s Day 



Please pvt a check ztexi to the apphceiions you ovn 
g] K&rosofl Word 
J Adobe Photoshop 
3 Netscape 
M K6crosoft Excel 



Stbmi This Form 






Figure 7.2 JT^ere are several types of HTML form fields available 
to retrieve information from Web users. 



Note that all of the form elements in the preceding code use the 
NAME attribute. The idea is that the user enters text in a field or 
checks a radio button; this data is assigned a variable corresponding 
to the value of the NAME attribute. The CGI script uses these data 
by referencing die corresponding variable name. For example, the 
response from a post-query script to the preceding example is 
shown in Figure 7.3. 

Links to HTML Forms Tutorials 

Intro to CGI Scripts and http://kuhttp.cc.ukans.edu/info/ 

HTML Forms forms/forms-intro.html 

NCSA Forms Tutorial http://kuhttp.cc.ukans.edu/info/ 

forms/forms-intro.html 

Carlos’ Form Tutorial http://robotO.ge.uiuc.edu/~carlosp/ 

cs3I7/cft.html 
















Figure 7.3 A post-query script is useful for displaying the values of 
an HTML form. 



A post-query script is a generic term for any script that merely 
echoes back the results of an HTML form submission. It is useful 
to have such a script on your server to aid in CGI script debug- 
ging. The NCSA httpd distribution for Unix systems contains 
a post-query CGI that you can use. Check out http:// 
hoohoo.ncsa.uiuc.edu/cgi-bin/post-query. 

Two alternative methods of transferring form data to a CGI 
script are POST and GET. These are the possible values of the 
METHOD attribute in die opening <FORM> tag. The GET meth- 
od of transferring data is somewhat antiquated and dates back to 
the old Gopher days. You are limited to passing no more than 4 KB 
of data back to the server using GET. POST, however, allows trans- 
fer of up to 24 KB of data. This results from the fact that a request 
made through the GET method concatenates all the HTML form 
variables into a single string; this string is appended to the URL in 
the HTTP message that identifies the CGI script. Requests made 
through the POST method combine all the form parameters into 
an internal variable that is passed to the script. 
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The Macintosh CGI Environment 

CGI scripts on your Macintosh Web server will interact with the 
servers we talked about in Chapter 4. In the section, “Macintosh 
CGI Scripting Languages,” we’ll talk about the various options you 
have for developing CGI applications to work with your HTTP 
server. Before discussing your scripting options, let’s talk about 
how CGI works on the Mac. 



Apple Events 

CGI scripts work differently on various operating systems. For ex- 
ample, on the Unix operating system, servers transfer data using 
standard input and Unix environment variables, depending on 
whether or not the transfer method is POST or GET. Similarly, a 
Windows HTTP server uses content files to transfer information to 
the CGI script. Under the MacOS, HTTP servers and CGI scripts 
transfer data using Apple events. 

Apple events are a feature of the MacOS that allows communica- 
tion of data between applications. Unseen by the user, Apple events 
flit back and forth carrying various pieces of information between 
applications. For example, Web browsers use Apple events to 
launch helper applications to view particular files; through Apple 
events, a browser starts the viewing application and transmits the 
newly downloaded file for interpretation. 

At first, Apple events received very little attention among the 
Macintosh development community. The Finder supported only 
the most fundamental Apple events; even so. System 7.0 used these 
operations to open and close applications and print documents. 
With later versions of the MacOS, more Apple events were defined, 
thereby allowing a wider variety of information to pass between 
applications. 

Macintosh HTTP servers utilize Apple events to communicate 
HTML form data to the CGI scripts. The scripts need to be written 
in languages that can accept Apple events. The output of these 
scripts usually consists of HTML which is sent back down to the 
browser. 
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Script Processing 

In the early days of MacHTTP, CGI scripts could only be executed 
synchronously; in these instances, all server activities are suspended 
until the CGI application is completed. An asynchronous CGI 
script is executed asynchronously, meaning that the script shares 
server resources vrith other processes. The script is alternatively 
suspended and executed depending on the needs of other process- 
es. Synchronous CGI scripts are denoted by the .cgi suffix; asyn- 
chronous CGI scripts are labeled with the .acgi suffix. Macintosh 
Web servers, as well as other servers, process CGI applications dif- 
ferently based on these suffixes. 

A script needs to be developed using a multithreaded or finite-state 
machine architecture in order to take full advantage of asynchro- 
nous script handling. For the Mac, this means the script is devel- 
oped using the Thread Manager libraries. The Thread Manager is a 
system extension that comes with the MacOS as of System 7.5. 
Multithreaded computing is the next step below true multitasking 
on the computer processing hierarchy. With true multitasking, 
processes are computed simultaneously with the operating system 
performing the bookkeeping regarding process status. In the multi- 
threaded MacOS, the applications have to keep track of which pro- 
cess reliquishes and assumes control. The latter arrangment is not 
as efficient as true multitasking. 



CGI Variables 

Macintosh HTTP servers rely on an Apple event to not only start 
up the CGI application, but to pass the HTML form data as well. 
This Apple event is composed of two parts: the class WWW and the 
actual event sdoc. These parts must be separated with the capital 
omega character, £2. 

The WWWQsdoc Apple event is sent by the HTTP server. Included 
in this event is the information obtained from the HTML form. 
Your CGI needs to do the following: 

□ Respond to launch call from server. 

□ Wait until server sends an Apple event containing data from 
Web browser. 
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□ Retrieve data from Apple event and parse the data accordingly. 

□ Process the data and formulate an appropriate response such 
as a properly formatted HTML document or graphic image. 

□ Quit once all processing has been completed. 

We discussed earlier how the sdoc Apple event is used by the 
Macintosh WWW server to transmit information from the Web 
browser to the CGI script. This Apple event contains information 
that is useful for CGI script processing. A summary of the CGI 
variables sent to the server is shown in Table 7.1. 

Table 7.1 CGI Variable Description 



Variable 


Description 


path_args 


The data after the $ and before a ? in a URL 


http_search _args 


Search arguments, which follow the ? in a URL 
such as in an <ISINDEX> tag or imagemap 
request 


post_args 


The data typed into the form 


method 


The method used to convey the information to 
the server, typically GET or POST 


user_agent 


The type and version of Web browser initiating 
the request 


client_address 


The IP address used by the Web browser 


server_name 


The IP address of the Web server 


server_port 


The IP listening port used by the server 
(usually 80) 


username 


The validated user of the Web browser 


password 


The validated user’s password 


script_name 


The full path name of the CGI script 


referrer 


The URL of the page containing the script 


content_type 


The MIME content type of post_args 


full_request 


The full WWW client request as seen by the CGI 
script 
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In addition to the standard variables listed here, the CGI script 
works with variables obtained from HTML form fields and im- 
agemap requests. 

Macintosh CGI Scripting Languages 

Several scripting language options are at your disposal^ some of 
which are free or included with your operating system. These lan- 
guages perform the same function: they retrieve form variables 
from the HTTP server, process the data, and return a response to 
the requesting browser. The ease of this process varies between 
languages. There exists, for each of these scripting languages, a 
wealth of CGI script archives that perform a variety of common 
tasks. These languages include: 

□ AppleScript 

□ UserLand’s UserTalk 

□ MacPerl 

□ InterCon’s InterXMTL 

□ HyperCard 

□ C/C++ 

In the following sections, we’ll discuss the merits and disadvantages 
of these various scripting languages. None of the sections below arc 
intended to be a comprehensive guide to the respective languages. 
For a more in-depth treatment of these languages, you should 
check out the computer section of your local bookstore. 

You’ll need the following applications available to write and test 
your CGI scripts: 

□ An HTTP server application such as MacHTTP, WebSTAR, 
or InterServer Publisher. 
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□ An editor to use to formulate your CGI script. Most scripting 
languages come with a native editor. For example, AppleScript 
comes with the Script Editor. Think C++ comes with a native 
editor as well. Use of these editors expedites script compila- 
tion and debugging; however, you can use a common editor 
such as BBEdit to develop scripts in any of these languages. 

□ An HTML editor. I recommend either Adobe PageMill or 
BBEdit 3.5 (or later) with the BBEdit HTML Extensions. 

□ A Web browser such as Microsoft Internet Explorer or 
Netscape Navigator. 

It’s advisable to edit your scripts and HTML on a local Mac, run 
your Web server on a remote Mac, and use an FTP application such 
as Anarchie or Fetch to transfer your scripts to a CGI folder. In this 
way, you’ll be testing your scripts as many others will be using 
them. 

I also recommend that you organize your Web server folder into 
separate folders for HTML documents and CGI scripts. I keep a 
folder called Test in my MacHTTP folder, in which I install my test 
scripts. Similarly, I store CGI scripts in a folder entided CGI. 

AppleScript 

AppleScript is the MacOS system-level scripting language; it binds 
the operating system with AppleScript-aware applications to auto- 
mate and customize operations within the MacOS. For example, 
you can create an AppleScript that can do some of the following 
example tasks: 

□ Perform a complicated Finder function, such as change the 
folder view to View by Name 

□ Open a Web or FTP client to a particular URL 

□ Copy cells from a table from a Microsoft Excel spreadsheet 
and paste them into a Microsoft Word document, all without 
having to open the applications direedy 
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With the advent of System 7.5, AppleScript became more accessible 
to Mac users for two reasons. First, and perhaps most importantly, 
AppleScript and the associated Script Editor were bundled freely 
with the operating system. The Script Editor is used to edit and 
construct AppleScript applications. Secondly, the Finder became 
scrip table and recordable under AppleScript. This latest feature 
enables you to construct AppleScript applicadons simply by telling 
the Script Editor to record your actions. This does not have great 
value with regards to CGI scripting, but it’s a potent means of cre- 
ating organizational tools for your desktop environment. 

Using the Script Editor 

Along with the AppleScript extension, which resides in tlie Exten- 
sions folder, the AppleScript package comes with a utility known as 
the Script Editor. This utility is a rudimentary text editor that al- 
lows you to create and compile AppleScript applications. Although 
you could create scripts using a conventional editor such as Simple- 
Text or BBEdit, you’ll need the Script Editor to check your syntax 
and actually create AppleScript applications. 




Commercial alternatives to Apple's Script Editor are available. Full 
Moon Software's ScriptWizard (http://www.fullmoon.com/fmsdl/ 
products/fms_scriptwiz.html), Main Event's Scripter (http:// 
www.yy.net/bis/mainevent/scripter.html), and Late Night Soft- 
ware's Script Debugger (http://dev.info.apple.com/solguide/ 
script.html) are some examples of commercial AppleScript editors 
that provide more functionality than Apple's Script Editor. 



Let’s get started with AppleScript. Double-click on the Script Edi- 
tor application and you should see a window similar to that in Fig- 
ure 7.4. Note that there are two windows within the Editor. The 
top window is the Description window which is used as you might 
imagine. You can enter comments about the script, your name, 
your email, and your excuses why it may not work. The lower win- 
dow is the Scripting window to enter your AppleScript commands. 
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NOTE , Don't worry, it's not just you. The default Screen Editor window is 

o much too small to do any real work. You need to resize the win- 

dow to a normal size to write your scripts. When you open a 



script with the Script Editor, the window will size to fit the script. 
You can set the default window size by clicking on the Script Edi- 
tor File menu and dragging down to Set Default Window Size. 



Record button 
Stop button 
Run button 



I Hlde/Shoiu Folder Sizes I 






“BBS 



' " w 



Hide/Show This script toggles the 'Calculate folders 

sizes' checkbox In the “Views" control panel on and off. 





[fell applicafi on "Ftrijar 



it calculate fold 

"Yievs'tn 



r sires of file 

Icontrol panels folder then 
aet celculj e folder sizes of file i 

"Views" In control panels folder to felse 

else 

set calculate folder sizes of file 

“Views* In control panels folder to true 

end If 
end tell 









m 



Description 
window 
Check Syntax 
button 



Scripting 

window 



Figure 7.4 Within the AppleScript Editor window^ you can 
record, run, and check the syntax of your scripts. 



Creating Scripts 

Four buttons are located between the two windows: Record, Stop, 
Run, and Check Syntax. These buttons are designed to aid you in 
composing and executing scripts. Using the Record button, you 
can create scripts, much as you can create macros with QuicKeys or 
other macro packages. Simply clicking the Record button and then 
running scriptable applications and Finder operations, you can cre- 
ate a rudimentary script. You can watch the Script Editor fill up 
with commands as you perform operations. Clicking on the Stop 
button ends the script generation. 

Clicking on the Run button executes the script you have just 
recorded. You’ll see your actions mimicked by the script with 
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application windows opening and closing. You probably won’t en- 
counter any errors if you run a recently recorded script; if you do 
encounter errors, the Script Editor will return an appropriate mes- 
sage. 

You also can compose a script from scratch using AppleScript syn- 
tax, much as you would with any programming language. The 
Script Editor offers some rudimentary editing functions. You can 
use the Check Syntax button to validate your script. Furthermore, 
the script formatting will change from a roman font to a display 
similar to that shown in Figure 7.4, where various AppleScript re- 
serve words appear in bold type and the looping constructs are 
indented accordingly. 

Saving Scripts for Reuse 

To reuse the script over a long period of time, you’ll eventually 
have to save the script to disk. You have several options with which 
you can save your files. They include straight text files, compiled 
scripts, and applications. Each brand of script is identified by an 
icon (see Table 7.2). 



Table 7 . 2 Script Editor Saving Options 



Type 


Description 


Script Text 


Script can be edited with any text editor. Useful 
for constructing script. 


Compiled Script 


Script is executable through the Script Editor. 
Can still be edited. 


Application 


Script can be run without the Script Editor. Can- 
not be opened with text editor. 



Text-Only Scripts 

The text-only script is usually the first stage of script construction. 
In this step, you will most likely be constructing and modifying 
your script, so you’ll want to save it in an accessible format. You 
cannot run the script at this point without checking die script syn- 
tax. Text-only scripts can be opened with other text editors. 
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When you save a script, the Script Editor will want to compile it 
for you. For large uncomplicated scripts, you may not want to, or 
not be able to, compile when you save it. Holding the Shift key 
down when you're saving the document suppresses compilation. 



Compiled Scripts 

If your AppleScript syntax is correct, you can save your script as a 
compiled script. This enables you to edit and run the script within 
the Script Editor. 

Applications 

If you want to run your script without the inconvenience of open- 
ing the Script Editor, you can save it as an application. Your script 
then acts like any other Macintosh application; double-clicking on 
it executes your AppleScript commands; furdiermore, you can cre- 
ate aliases of AppleScript applications and install tliem in your Ap- 
ple Menu Items folder. Many of the tasks performed in System 
7.5’s Speakable Items folder are compiled AppleScript applications. 
AppleScript applications require less space than normal scripts, be- 
cause much of the work is performed by the system software. 




One useful feature of the Script Editor enables you to save your 
application so that it will display the contents of the Description 
window in a dialog box. The user then has the option of quitting 
or running the application after reading the script description. 



Other Script Saving Options 

You may have reason to store your script in a format that will pre- 
vent other users from editing your script. For this reason, you may 
want to save your script using the Save As Run- Only option under 
the File menu. A copy of your script will be saved as a run-only 
compiled script or application. 
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If you want to save your script as a Run-Only application, you’ll 
need to have compiled it correedy. You’ll be presented with two 
additional saving options. Clicking on the Stay Open checkbox 
causes the application to stay open until it is closed by the user (if a 
splash screen was presented) or until it is closed by an Apple event. 
Clicking on the Never Show Startup Screen checkbox prevents the 
splash page from appearing. 




When you save thefile xs a run-only application or compiled 
script, you will no, longer be able to edit the script, so be sure to 
save a backup copy, >•. 



Developing CGI Scripts with AppleScript 

As with all languages discussed in this chapter, I’m going to skimp 
on describing AppleScript language and syntax. You will be better 
served by referring to several of the AppleScript books out on the 
market. Try to look at the examples in this section and understand 
the structure of the script. As you’ll soon find out, CGI scripts have 
the same basic structure, even if they’re constructed in different 
languages. When constructing your own AppleScript CGI scripts, 
refer to the examples shown here and extend them with Apple- 
Script knowledge gleaned fi’om other sources. 

You will need to save your CGI scripts using the Run-Only option. 
Furthermore, you will need to activate both of the checkboxes. 
AppleScript CGI scripts need to stay open for a period of time after 
activation; allowing the splash screen to activate would interfere 
with communication between the Web server and the script. 



Extending AppleScript through OSAXen 

j^pleScript maintains a very limited vocabulary. This is by design; 
the language itself maintains a simple structure with many of the 
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sophisticated tasks performed by the scripting additions. Scripting 
additions are very special types of system extensions. They can be 
found in the Scripting Additions folder in your Extensions folder. 
These tools in effect are external software libraries that extend the 
AppleScript vocabulary. Such a library is often referred to as an 
OSAX (Open Scripting Architecture Extensions), or in the plural 
form OSAXen. 



rJe 

NOTE ^ Apple set up a system to allow future scripting of the operating 
o system using Apple events. This system is known as the Open 

Scripting Architecture (OSA). The Open part of OSA refers to the 
fact that internal mechanisms are in place to be used by any third- 
party scripting environment, such as UserLand's Frontier. 



OSAXen are often compiled in a language such as C or Pascal, rath- 
er than AppleScript itself. As a result, AppleScript performance is 
enhanced by using OSAX. The scripts described in this section will 
use OSAXen designed to aid in CGI processing. AppleScript itself 
would be able to handle these tasks, but the use of OSAX com- 
mands greatly speeds up the processing; this is desirable for all ap- 
plications, but especially CGI processing. 




OSAXen exist in scripting environments other than AppleScript. 
HyperTalk, for example, uses external commands (XCMDs), and 
external functions (XFCNs) which are technically defined as OSAX- 
en. You can tell whether a file is an OSAX by peeking at its file 
type with a resource editor like ResEdit or File Buddy. If it's an 
OSAX, its file type will be osax. 

You will need a variety of scripting additions to enhance the perfor- 
mance of your CGI processing. Some of these tools are useful for 
general scripting purposes. The most useful OSAX available for 
AppleScript CGI usage is the Parse CGI OSAX from Clearway 
Technologies; this software is available on this book’s CD-ROM. 
This library allows you to decode, parse, and access the HTML 
form information passed to the CGI application from the Web 
server. It replaces some of the older OSAXen. The ScriptWeb 
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(http://\vw'w.script\vcb.com) archive maintains many OSAXen for 
use in CGI scripting as well as general AppleScript use. 




Keep in mind that you can avoid using OSAX if you want. OSAX 
functions can almost always be duplicated using AppleScript. How- 
ever, OSAXen are usually constructed using compiled C or Pascal 
code, and therefore offer subroutines that run many times faster 
than AppleScript equivalents. 



Sample AppleScript CGI Script 

In this section, we’ll look at a simple, but comprehensive Apple- 
Script CGI script. We’ll dissect the script and look at how the script 
interacts with the browser and processes the data. 

Let’s take a look at a sample HTML forms page that queries and 
accepts data from the user. 

<F0RM METH0D=P0ST ACTION=“http: / /cgi-test/cgi/ 
‘»test_as.cgi“> 

Enter your first name here: 

<INPUT NAME="first_name“ SIZE=35> 

</TEXTAREA><P> 

Select the movie you like best 
<SELECT NAME=“ movie" SIZE=5> 

<0PTI0N> Apollo 13 
<0PTI0N> Star Wars 
<0PTI0N> Howard's End 
<0PTI0N> Taxi Driver 
<0PTI0N> Pulp Fiction 
</SELECT><P> 

<DL> 

<DT>How old are you? 

<DD><INPUT TYPE=" radio" NAME="age“ 

|»VALUE=" young ">Younger than 24 

<DD><INPUT TYPE="radio" NAME="age" VALUE=" middle ">24-35 
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<DD><INPUT TYPE=" radio" NAME="age" VALUE="old">01der 

^than 35 

</DL> 

Press here to submit form 

<INPUT TYPE="submit" VALUE="Submit Form"> 

</FORM> 

This simple example is shown in a Netscape Navigator browser 
window (see Figure 7.5). In this figure, we see that the HTML 
page uses a variety of form types to convey data to the CGI script. 
As with AppleScript and the other languages discussed here, in- 
struction on programming with HTML forms is best left to the 
many other books devoted to this topic. 




Figure 7.5 The data from this HTML form example will be passed 
to the AppleScript CGI example. 



Now, let’s develop a CGI script to process the data you may enter 
from the CGI page. The example script is shown here: 

-- Set up global variables 
global crlf 
global http_10_header 
global datestamp 
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-• define a variable equal to a carriage return and a 
‘••line feed 

set crlf to (ASCII character 13) & (ASCII character 10) 

- - set the current date to a variable 
set datestamp to current date 

-- set up number of seconds that script will remain 
‘•idle before terminating 
set idletime to 15 

-- define a standard HTTP 1.0 header 
set http_10_header to “HTTP/1.0 200 0K“ & crlf & -> 
“Server: MacHTTP" & crlf & -> 

"MIME -Version: 1.0" & crlf & -• 

"Content -type: text/html" & crlf & crlf 

-- This is the handler that processes Apple events sent 
‘•from MacHTTP. 

-- WWWQsdoc is the event sent with GET or POST methods. 
-- process Apple event sent by the WWW server 
on «event WWW£2sdoc» path_args given «class 
k»post» : post_args , «class addr» : client_address 

set formdata to parse CGI arguments post_args 
set full_name to CGI field "first_name" from 
‘•formdata 

set rock to CGI field "movie" from formdata 
set age to CGI field "age" from formdata 
set return_page to http_10_header & 

“<HTML><HEAD><TITLE>AppleScript CGI Test 
‘•Results</TITLE></HEAD>“ & -> 

"<BODY><H1>AppleScript CGI Test Results</ 
‘•H1>“ & return & -■ 

"<H2>Parse CGI Test</H2>" & return & -• 
"<HR>" & return 
-- list form variables 
set return_page to return_page & -> 

"You are coming from the IP address: “ & 
^client_address & "<P>“ & return & -> 

"Your first name is " & return & first_name 
k»& "<p>" & return & -> 
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"Your favorite movie is “ & movie & "<P>" & 

^return & -> 

“You consider yourself to be of the " & age 
“ age group" & "<P>" & return & -■ 

“</B0DY></HTML>" 

return return_page 
end «event WWW->sdoc» 

- - Following handlers quit applications if idle after 
idletime" seconds 
on idle 

if (current date) > (datestamp + idletime) then 
quit 

end if 
return 5 
end idle 

on quit 

continue quit 
end quit 

Let’s go over the example section by section. 



Variable Initialization 

- - Set up global variables 
global crlf 

global http_10_header 
global datestamp 

• - define a variable equal to a carriage return and a 
•■line feed 

set crlf to (ASCII character 13) & (ASCII character 10) 

- - set the current date to a variable 
set datestamp to current date 

- - set up number of seconds that script will remain 
•idle before terminating 

set idletime to 15 

At the start of the script, we need to define the variables used in the 
script. The global statements are used to define the script global 
variables. The variables function much as global variables do in 
more sophisticated programming languages; global variables are 
available inside subroutines that might exist within the AppleScript. 
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The variable crlf is set to the ASCII equivalent of a combined char- 
acter return and line feed. This variable is useful in constructing the 
HTTP 1.0 header. The variable datestamp is also set to the current 
date, as determined by the server. The script is designed to quit 
after a certain amount of time; this predetermined time is set in the 
idletime variable. 



Setting Up the HTTP 1 .0 Header 

-- define a standard HTTP 1.0 header 
set http_10_header to '‘HTTP/1.0 200 OK" & crlf & -• 
"Server: MacHTTP" & crlf & - 
“MIME-Version: 1.0" & crlf & 

"Content-type: text/html" & crlf & crlf 

In this part of the script, we’re beginning to formulate a response 
to server to convey back to the browser. To do this, we need to 
construct an HTTP 1.0 header. This header tells the Web browser 
several things about the content of the message. 

We begin by constructing the HTTP 1.0 header variable entided 
http_10_header. This variable is constructed using a concatenation 
of text strings, carriage return/line feeds, and AppleScript continu- 
ation symbols. The line continuation symbol, obtained by pressing 
Option-L, allows you to construct a variable over several lines. In 
this variable, we are tricking the browser into thinking it’s receiving 
a message from the Web server. Therefore, we need to construct 
the message header as a server would. 

This is accomplished by returning the HTTP code of 200, which 
tells the browser that its request was received and a completed re- 
sponse is on its way back. The next line tells the browser that the 
server is MacHTTP; you’ll have to substitute the name of which- 
ever browser you end up using. After telling the browser that 
content is being sent using version 1.0 of the MIME encoding 
protocol, we tell the browser that the content is of MIME type 
text, subtype html. The browser then knows to process the re- 
sponse as an HTML file. 
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Defining the Apple Event Handler 

One of the more complicated AppleScript constructs is the handler. 
At the risk of over-simplifying the description of handlers, they can 
be described as subroutines that get executed when a certain event 
takes place. We’ll use a handler to receive and interpret the WWW- 
Qsdoc event. 

on «event WWW£2sdoc» path_args given «class 
^post» : post_args , -■ 

«class addr»;client_address 

end « event WWlW-isdoo* 

The « and » characters are obtained by using the Option-\ and 
Option-Shift-\ combinations. In this handler, the post_args and 
client_address variables are obtained from the WWWIlsdoc Apple 
event. The variables from the HTML form are contained in the 
post_args variable and need to be extracted later in the script. 



Processing the Form Data 

set formdata to parse CGI arguments post_args 
set full_name to CGI field "first_name" from 
k*formdata 

set rock to CGI field "movie" from formdata 
set age to CGI field "age" from formdata 

The statements above extract data from the post_args variable using 
the parse CGI arguments command from the Parse CGI OSAX 
previously described. This command is intrinsic to the OSAX and is 
used to read the content from post_args and assign the content to 
AppleScript variables. 




The Parse CGIOSAX is described in the previous section, "Extend^ 
ing AppleScript through OSAXen. " The Parse CGI OSAX home 
page is given in the list of links at the end of this chapter. 
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set return_page to http_l0_header & -• 

“<HTML><HEAD><TITLE>Test 4</TITLE></HEAD>“ & -> 
"<B0DY><H1>Test 4</H1>" & return & -> 

"<H2>Parse CGI Test</H2>" & return & -> 

"<HR>" & return 

In the statements preceding, we are continuing to construct the 
CGI response. The entire response will be contained in the variable 
return_page; return_page consists of the text string http_10_header 
and a series of additional strings concatenated to one another. 

These strings are added to one another using the ampersand sym- 
bol. Note that the return_page string contains HTML commands 
along with the return variable we defined at the beginning of the 
script. These HTML commands are processed by the browser and 
displayed on the screen as if they came from HTML files. 

set return_page to return_page & -• 

“You are coining from the IP address: " & 
‘»client_address & “<P>“ & return & 

“Your first name is " & return & first_name & 
i*“<p>" & return & -> 

“Your favorite movie is " & movie & "<P>“ & 
^return & -■ 

“You consider yourself to be of the “ & age & “ 
^age group" & "<P>" & return & -< 

“</B0DY></HTML>" 

In the statements above, we include the form data and the Web 
Browser’s IP address in the CGI response. Remember that the 
client_address CGI variable is sent by most browsers to the server. 
This variable is included in the Web server’s Apple event transmis- 
sion to the CGI script. 



Overriding the Stay Open Option 

By checking the Stay Open box, your AppleScript CGI application 
will stay open indefinitely. As mentioned earlier, your script needs 
to be active for a period of time to allow your Web server enough 
time to transfer the browser request. However, you may not want 
to have the application open indefinitely. If you are rimning many 
CGI scripts simultaneously, you can easily consume your server 






198 



Building and Maintaining 



an Intranet with the Macintosh 



resources. For this reason, you may want to close down these 
scripts soon after they are accessed. The following statements of the 
sample script perform this very function. 

-- Following handlers quit applications if idle after 
idletime" seconds 
on idle 

if (current date) > (datestamp + idletime) then 
quit 

end if 
return 5 
end idle 

on quit 

continue quit 
end quit 

The variable datestamp is set at the beginning of the program’s 
execution. The variable idletime was also set at that time; this 
variable is defined to be the amount of time (in seconds) that the 
program will stay active after launch. When the script is idle for 
idletime seconds, the handlers in the above code cause the script to 
self-terminate. If the application is not idle and is instead processing 
an Apple event, the idle handler returns a value of 5, meaning that 
the server quit handler will be queried in 5 seconds. 

This quit handler enables you to insert some extra AppleScript 
commands before shutting down the script. You could perform 
such tasks as logging the CGI script access or writing some other 
type of data to a file. 

You’ll want to set idletime high enough to keep the application 
open for Apple event requests. Keep in mind that any CGI request 
received while the application is quitting is lost. When this happens, 
the user will have to resubmit the browser request with an annoy- 
ing loss of a few seconds. You don’t want the application to be 
opening and closing every few seconds if it’s a popular script, such 
as a search script. For this reason, you’ll have to adjust idletime 
accordingly. 
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The Results 

Given the form setup in Figure 7.5, tliis very simple CGI script 
returns the result shown in Figure 7.6. 







Netsespe: AppleScript CGI Test Results 



S*lo*d 



AppleScript CGI Test Results 

Parse CGI Test 



Your fevDite motvio is Ho vaids End 



You consider TouiMlf to be of the xoiddle ege giDcp 






Figure 7.6 Is it or isn ■’f it? This Web pa£ie is not really a file 
containing HTML, but is actually HTML returned from a CGI 
script. 



Ideas for AppleScript CGI Scripts 

The advantage of using AppleScript is tliat you have access to 
inter-application communications. The Apple event handler in 
AppleScript works cleanly with other Macintosh applications. 
Therefore, you can include information processed by these other 
applications within your CGI scripts. 

Interfacing with FileMaker Pro 

Regardless of the operating system, one chief application of Web 
servers on all platforms is the interaction with external databases via 
the World Wide Web. One of the prominent database applications 
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on the make is Claris’ FileMaker Pro. The ROFM CGI (formerly 
FMPro CGI (http://rowen.astro.washington.edu/) was developed 
for the purpose of allowing you to edit, add, and delete records in a 
FileMaker Pro database. 


''ma 

NOTE 


More information on database searches via the Web is available in 
Chapters, "Databases and Document Searches." 




Other Applications 

Again, the opportunities for interactions with your AppleScript 
CGI scripts is limited by your imagination. In addition to general 
CGI processing, you can program your scripts to extract actual 
words out of Microsoft Word documents and enter them in 
Microsoft Excel spreadsheets. AppleScript’s native handling of Ap- 
ple events enables you to interact with MacOS applications nearly 
seamlessly. 


Frontier 


UserLand Frontier is the first comprehensive scripting system de- 
veloped for the Macintosh. Frontier is actually the environment in 
which you develop scripts. The scripting language itself is known as 
UserTalk. Frontier was originally offered as a commercial product; 
soon after Apple’s decision to bundle AppleScript and die Script 
Editor with System 7.5, Frontier became freeware. 




Frontier has several advantages over AppleScript. Frontier is 
PowerPC-native, meaning that Frontier applications run much 
faster on Power Macs. AppleScript applications run in emulation 
mode on the Power Mac and therefore cannot take full advantage 
of the PowerPC architecture. Furthermore, Frontier is multithread- 
ed; this means you need the Thread Manager extension installed in 
your Extensions folder. Both of these features have direct relevance 
to CGI scripting. 
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NOTE 






Pre-system 7.5 users can get a copy of the Thread Manager at 
ftp://ftp.support.apple.com. 



In this section, we’ll take a brief look at the Frontier scripting envi- 
ronment. After this, we will discuss Frontier’s utility as a CGI 
scripting environment. 



Introduction to Frontier 

UserLand’s Frontier is actually a scripting environment of which 
UserTalk is the scripting language. However, it is difficult to dis- 
associate the two. Whereas you could develop AppleScript without 
the Script Editor, UserTalk is designed specifically to work within 
Frontier’s hierarchical structure. We will discuss the structure of 
Frontier, but we’ll give only a brief tutorial on the UserTalk lan- 
guage. You are referred to the DocServer database distributed with 
the Frontier application. 




Installing and Opening Frontier 

Frontier is available on this book’s CD-ROM. There is a PowerPC- 
native and PowerPC non-native version. Select the version compati- 
ble with your Mac and move the folder to a suitable location on 
your computer. 



Double-click on the Frontier application. You should see a small 
menu bar appear, as shown in Figure 7.7. This menu bar is the 
starting point for developing scripts in Frontier. Click on the flag to 
toggle the visibility of four buttons used to aid in your script writ- 
ing. Clicking on the Menu Bar button enables you to adjust the 
items in Frontier’s menus. Clicking on the Object DB button 
opens up the Frontier object database. This database is an integral 
part of the Frontier application and will be discussed later in this 
section. The Quick Script button enables you to generate a short 
script for debugging or diagnostic purposes. Clicking on the Tech 
Support returns a menu detailing your technical support options. 
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□ Frontier <.0bl:B37K, 11:10:39 HM; 1 thread. t 
I M»nuBar | | ObJtctPe | | QutekSeripr~| | T»chSuppcrT1 



Figure 7.7 Frontier’s Main window is the starting place for your 
script development. 



Quick Scripts 

To get a feel for the syntax, let’s try running a very quick script. 
Click on the Quick Script button. The Quick Script window will 
appear. In this window, type the following: 

msg( "Intranets are big!!") 

and then click the Run button. Now look in the area of the Main 
window above the buttons. As shown in Figure 7.8, you will see 
the phrase “Intranets are big!!” In contrast, type the phrase: 

dialog( "Intranets are big!!") 

and click the Run button. You will see a dialog box pop up with the 
phrase “Intranets are big!!” in the main part of the window. Click 
OK, and the window disappears. 





Intranets are bigli I 


1 | 






Figure 7.8 The Qtiick Script window enables you to write short 
scripts with outputs appearm£f in the Main window. These scripts 
are useful for printing diagnostic messages. 
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The Object Database 

In order to write more complicated scripts, we need to discuss the 
Frontier Object Database that is the foundation of the Frontier 
scripting environment. Double-click on the Object DB button on 
the Frontier Main window. A table similar to that shown in Figure 
7.9 will appear. This table is Frontier’s Object Database; the actual 
file in which the database is stored is known as Frontier. root and is 
usually located in the same folder as the Frontier application. This 
file, along with tlie application itself, contains everjldiing you need 
to run Frontier. All your scripts and variable definitions will be 
stored in tliis file. 



Frontier 4.0b1: 754K, 2:43:00 PN; 1 thread. 

I W»nuB*r | | Qb)»ctDe | j Qutek SoripTn | T»c^ SupporT~| 




Name Value Kind 



arelha 


on disk 


table 


MakeScriptA 


on disk 


script 


scratchpad 


on disk 


table 








system 


1 1 Items 


tabll 1 


user 


5 Items 


table p 






Figure 7.9 Many types ofFi'ontier objects are stored in the Object 
Database, 



The Object Database is a hierarchical table of variables. These vari- 
ables can consist of a variety of objects; the major Frontier object 
types are shown in Table 7.3. A variables object type is listed in the 
column under the Kind heading. Table contains scripts, variables, 
outlines, menubars, and other objects associated with a certain 
function. Note that tables can even contain other tables. You can 
have up to 25 levels of objects, but for tlic sake of good organiza- 
tion it’s better not to go use more than 8-10 levels. 
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Table 7.3 Description of Frontier Objects 



Object 


Description 


tabic 


Table containing other objects 


boolean 


Boolean value (True, False, 1, 0) 


character 


ASCII character 


number 


Integer 


floating-point number 


Double-precision number 


date 


String containing date and time 


direction 


Set of directions useful for navigational 
applications 


string 


String of text 


word processing text 


Document in word processing window 


picture 


PICT file 


outline 


Frontier outline 


script 


UserTalk script 


menu bar 


Menu 


binary 


Binary data representation 



The Object Database enables you to group objects according to 
their function. For example, the table system.extensions.trigCmd 
can be found by going to the Object Database and double-clicking 
on the system table. This brings up a table of objects inside the 
system table. Double-click on the extensions table and then 
double-click on the trigCmd table. The trigCmd table contains a 
series of UserTalk scripts, as shown in Figure 7.10. Double-clicking 
on one of the scripts in this table brings up the actual UserTalk 
code to perform a sine, cosine, or some other trigonometric calcu- 
lation. If the various trig scripts had required certain variables, inte- 
ger or floating-point numbers could have been stored in tables 
inside the system.extensions.trigCmd table and accessed by the 
scripts. 
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Figure 7.10 The system.extensions.tri^Cmd table contains a series 
of scripts, which can be used by other UserTalk scripts or even 
external applications. 

Running a Simple Script 

Before we discuss CGI scripting witli Frontier, we need to look at 
some simple script examples. You can use Frontier’s hierarchical 
structure to develop scripting applications. 

1. Open the Object Database. 

2. If there is not already a table entitled scratchpad, create one. 
You can do this by clicking on the Table menu and selecting 
Create Sub-Table. 

3. You will be queried for the name of the new table, so enter 
scratchpad. 

4. Once inside scratchpad, go back up to the Table menu and 
create another table called color^test. 

5. The names of the variable in this example arc arbitrary but 
must match the names used in the script. 
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6. Once inside the new table, create a table called colors. 

7. Using the New Special command under Table, create a series 
of strings. Label them, as shown in Figure 7.11. 

8. Go back to the color_test table and create a new script. This is 
done by clicking on New Script under the Table menu and 
naming the script. 



1 


green | 







$cratchpod.toicr,test.cotors 





Name 


Daloe 


Kind 




■ 


colon 


red 


string [3] 


■ii 


1 


color2 


blue 


string Ml 


1 


1 


colors 


uitiite 


string [5] 


1 


1 


color4 


orange 


string [6] 


1 


1 


[loior'i (jicM?n sliiriqlSl j 


iid 



▼! rl [ 






Figure 7.11 This table contains a series of text strings. 



9. The script window should be empty. If it is not empty, delete 
whatever lines arc there by clicking on the heading marks and 
pressing the Delete key. Insert the following lines into the 
script window. 

local (i) 
for i = 1 to 5 

msg ( scratchpad . color_test . colors [ i] ) 

Your script should look similar to the script window in Figure 
7.12. The table color_test now contains two elements: a script 
and a table of five strings. 

Make sure that you press the tab key to indent the msg statement. 
The local(i) statement defines a local variable i which is used in a 
for loop. Note that the for loop has no end statement, unlike Pascal 
and C. Frontier depends heavily on the outline view in this window 
to indent parts of your code; these indentations define the looping 
constructs and obviate the use of begin and end statements preva- 
lent in other languages. 
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□ 



Figure 7.12 The Frontier scripting environment allows you several 
options in running and debugging your UserTalk scripts. 



The msg command returns the value of its parameter to the status 
window in the Frontier Main window. In this case, we are cycling 
through the strings in the table scratchpad.color_test.colors; note 
that the individual colors are identified by an array-like index ap- 
pended to the table name. Pressing the Run button causes all the 
strings in the table to be rapidly displayed in the Main window. 

This very simple example demonstrates the hierarchical nature of 
the Object Database in addition to some rudimentary UserTalk 
syntax. There’s a great deal more to UserTalk and Frontier than 
what is described here. The intent of this section was to give you 
enough exposure to the environment to be able to program some 
rudimentary scripts. You are referred to the DocServer application 
for detailed information about UserTalk and to the Frontier user 
manual included in the software distribution. 

Developing CGI Scripts with Frontier 

Now that we’ve covered some rudimentary Frontier scripting prin- 
ciples, let’s talk about how to develop CGI scripts for your Web 
server using Frontier. Frontier works much the same way that 
AppleScript does; Frontier receives Apple events from the HTTP 
server and processes tliem through UserTalk scripts. 
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Comparable to AppleScript, you can develop external Frontier ap- 
plications. In contrast to AppleScript, these applications, known as 
desktop scripts or droplets, activate Frontier and do not run auton- 
omously. This actually saves a great deal of overhead because 
Frontier will most likely be running continuously on your server. 
Therefore, there will be minimal delays resulting from initializing 
your CGI scripts. 



The Frontier CGI Framework 

Another interesting feature of Frontier CGI scripts is that the 
scripts reside within the Object Database. With Frontier running 
continuously on your server, there is very litde overhead in running 
your scripts. However, Frontier needs to be able to trap the 
WWWQsdoc Apple event to gather the HTML form and CGI vari- 
ables. An entire new framework needs to be introduced to Frontier 
to allow this communication. 

The Frontier CGI Framework (http://www.webedge.com/ 
frontier/cgiframework.html) is a sophisticated series of Frontier 
scripts and objects to provide this very function. The CGI Frame- 
work is included on this book’s CD-ROM. In order to install the 
scripts into the Object Database, open the CGI Framework folder 
and double-click on the Frontier script Installer. This file is a special 
type of Frontier application, called an import/export file, that 
transfers its own collection of hierarchical scripts and objects into 
the Object Database in Frontier.root. By clicking on the installer 
file, you transfer the Framework scripts to your Frontier.root data- 
base. Specifically, the Framework will install new tables, entitled 
Webserver and webServerScripts in the root table. 

In addition to giving your CGI scripts a home, the Frontier CGI 
Framework adds several types of macros that aid your CGI script 
development. For example, in AppleScript we had to construct an 
HTTP response header from scratch. The Framework provides this 
functionality with the webserver.httpHeader script, which can be 
called firom within a UserTalk CGI script. 

After double-clicking on the Installer script, you will be queried for 
your Web server address. Enter your server address and press OK. 
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Note that the script is asking for an address and not a URL; do not 
include the http:// prefix. The script will then query you for the 
location of your existing CGI scripts. You may have MacPerl or 
AppleScript CGI scripts in a certain folder; select this folder in the 
dialog box. Finally, the script will ask if you want to read the 
webServer.readme file. This file describes the UserTalk commands 
introduced by the Framework and is well worth reading. 




The webServer.readme file is of the object type wp text. This ob- 
ject represents a sophisticated word-processing capability within 
Frontier. You customize the fonts and style of the document. 
When in an object of this type, scripts provided by the Frontier 
CGI Framework even enable you to create HTML code. 



Customizing Your Server 

Now that you have told Frontier how to handle and create your 
CGI scripts, you need to configure your Web servers so that they 
know to contact Frontier to process the CGI requests. The process 
is different between MacHTTP and WebStar. InterServer Publisher 
does not yet support suffix mapping, so this type of interface is not 
possible. 




For more discussion on suffix mapping, refer to Chapter 4, 
"Madntosh HTTP Servers." 



With MacHTTP, open the MacHTTP.config file and add the fol- 
lowing line: 

ACGI .FCGI APPL * text/html 




Open the MacHTTP Support I.O folder on this book’s CD-ROM. 
There are two Frontier scripts that you will need to run to allow 
MacHTTP to work with Frontier. First, you need to create aliases 
to your Frontier CGI scripts. Double-click on the Make Script 
Aliases script. This rifles through die CGI scripts you have con- 
structed in your suites.WebServerScripts table and creates aliases in 
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your HTML folder. After doing this, double-click on the 
traps.WWWt2 for MacHTTP script. This installs the proper scripts 
into Frontier.root, enabling Frontier to pick up the required Apple 
events from MacHTTP. 



NOTE 






The aliases you create with Make Script Aliases script are not really 
aliases to the individual Frontier scripts. These are actually aliases 
to the Frontier application itself. The alias names alert Frontier as 
to which scripts need to be executed. 



Sample Frontier CGI script 

Let’s develop our own script. Open the suites.WebServerScripts 
table and create a script entided survey. Our intent is to duplicate 
the simple example shown earlier in this chapter, in the secdon 
“Sample AppleScript CGI Script.” 

on survey (Params) 

local (htmltext = Webserver. httpHeader ()) 
on add (s) 

htmltext = htmltext + s + or 

add(“<HTML><HEAD><TITLE>Frontier CGI Test 
^Results</TITLE></HEAD>“ ) ; 

add( "<BODY><H1>Frontier CGI Test Results</H1>" ) ; 

add(”<HR>"); 

with Params", argTable 

add ("You are coming from the IP address: " + 
‘i^clientAddress + "<P>"); 

add("Your first name is " + first_name + 

^“<P>") ; 

add ("Your favorite movie is " + movie + 

^"<P>" ) ; 

add("You consider yourself to be of the " + 
^age + " age group" + ‘'<P>"); 

add("</B0DY></HTML>") 

return(htmltext) 

Keep in mind that the indendng shown here is derived from Fron- 
der’s oudine view; there’s no need to add the tabs and spaces man- 
ually. Let’s analyze this script sccdon by secdon. 
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Preamble 

on survey (Params) 

local (htmltext = Webserver. httpHeader ()) 
on add (s) 

htmltext = htmltext + s + cr 

In this part of the script, is declared the subroutine survey with the 
parameter Params. Scripts from the Frontier CGI Framework pack- 
age all the CGI data variables passed from the Web server into the 
array Params. We then declare the variable htmltext as a local vari- 
able, assigning it the default value of webServer.httpHeader. This 
variable is equivalent to a standard HTTP I.O header of code 200; 
this code signifies a successful response to the browser request. 
Finally, we define a small subroutine where s is a text string; this 
subroutine concatenates the variable htmltext, the subroutine input 
string, and a carriage return into one text string. 




Information on HTTP header codes can be found at http:// 
www.w3.org/pub/VWVW/Protocols/. 



NOTE 






Form data obtained by the POST method is automatically 
parsed into the Params array. Form data obtained by the GET 
method needs to be parsed using the CGI framework verb 
Webserver. parseArgs. 



HTML Headers 

add(“<HTML><HEAD><TITLE>Frontier CGI Test Results</ 
^TITLE></HEAD>”); 

add(''<B0DY><H1>Frontier CGI Test Results</H1>" ) ; 
addC*<HR>‘'); 

In these statements, we use the add routine to create HTML head- 
er code. 
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Processing the Form Data 

with Pararos",argTable 

add(“You are coming from the IP address: " + 
^clientAddress + °<P>“); 

add(“Your first name is “ + first_name + “<p>"); 
addC'Your favorite movie is " + movie + "<P>"); 
add (“You consider yourself to be of the “ + age 
|»+ ” age group" + “<p>"); 

add("</BODY></HTML>") 
return (htmltext) 

Most of these statements are enclosed in a with statement. This 
enables us to refer to a variable without prepending the subtable 
names every time they’re used thereafter in the code; this is a pro- 
gramming shortcut and not an essential part of the program’s logic. 
The caret ('') following the Params database makes all the elements 
of the array available to the following statements. Form data is writ- 
ten to a subtable known as argTable. The variable names of the 
form fields, as defined in the original HTML code, are carried over 
into the Frontier script. Therefore, the text field first_name is avail- 
able as argTable.first_name. Finally, the variable htmltext is re- 
turned; this variable contains the entire CGI response. Remember 
to compile the script before executing it. 

Now process the HTML code, as shown in Figure 7.13. Make sure 
that you have an alias to the survey script in your CGI folder and 
that it’s referenced in your form statement. A typical response to 
the query is shown in Figure 7.14. 



Frontier versus AppleScript 

In terms of usefulness as a CGI script environment, Frontier has 
several advantages over AppleScript. As mentioned previously. 
Frontier takes advantage of the PowerPC architecture; Frontier 
scripts and applications will run much faster on Power Macs than 
on older 680x0*based Macintosh computers. AppleScript scripts 
and applications will run under 680x0-emulation mode, which is 
much slower. 







Figure 7.1 3 This simple HTML form is used to query the Frontier 
CGI script. 




Figu re 7. 1 4 This HTML pa^e waspfenerated by a Frontier CGI 
script. 
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Multithreaded processing is very important for CGI scripting. An 
application — ^such as an AppleScript application — that is not multi- 
threaded processes events on a last-in, first-out queue. When your 
server receives multiple requests for a CGI script, the older requests 
are forced to wait for newer requests to be answered. This may 
result in many CGI timeouts. Multithreaded applications, such as 
those constructed with Frontier, are more efficient, in that events 
are handled simultaneously and do not preclude one another. 

Furthermore, Frontier’s Object Database contains all the functions 
that Frontier CGI scripts might require. AppleScript applications 
frequendy make use of external libraries residing in various OSAX- 
en. Adding a new separate application for each CGI script creates 
more overhead for your server; this has the effect of slowing all of 
the processes. 

One advantage of AppleScript is its more comprehensible syntax. 
UserTalk retains many C-like constructs, which are difficult for 
many novice programmers to master. AppleScript syntax is easy to 
understand and is closer to conversational English than it is to an- 
other programming language. Furthermore, several AppleScript 
books are available on the market. 

Servers that receive a lot of CGI script requests will enjoy better 
performance with Frontier applications. More and more Web ad- 
ministrators are moving their scripts to the more flexible environ- 
ment exhibited by Frontier. If your Intranet Web server is going to 
see a lot of CGI action, you may well be advised to use the Frontier 
CGI environment for your scripts. 

other Frontier Intranet Applications 

Frontier can be set up as a URL handler for Navigator. By running 
Frontier in conjunction with Navigator, you can embed scripts 
within a browser window. Setting up a link with the following 
address: 
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<a 

^href="usrtlk:dialog.alert%20(%22Hello%20World!%22)">here< a> 
will execute the UserTalk command 
dialog. alert ( "Hello Worldl ” ) 

Embedded scripts present almost limidess possibilities for you to 
customize services on your Intranet. For example, you could easily 
develop embedded scripts on your Intranet Web pages that can 
work with Mac clients to do the following: 

□ Mount remote AppleShare volumes 

□ Perform software installations 

□ Launch Macintosh applications 

□ Update FileMaker Pro or Tango databases 

And the list goes on and on. As you become more comfortable 
with Frontier, you’ll be able to add more sophisticated capabilities 
to your Mac Intranet clients. 



NOTE . ^ You can embed AppleScript in your Web pages just like you can 
w with Frontier. However, you'll need a copy of Flypaper or Web 

Runner (http://www.pass.wayne.edu/~eric/applescript.html). 

Additional CGI Scripting Languages 

AppleScript and Frontier are two of the most popular CGI scripting 
languages for the MacOS. However, you can employ any language 
that can interpret Apple events directed from the HTTP server. 
Some of these alternative scripting environments are discussed in 
this section. 
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MacPerl 

The Practical Extraction and Report Language (PERL or most 
commonly, Perl) is a popular text-processing language with its ori- 
gins in the Unix operating system. Perl offers much of the utility of 
C and C++, but with easier syntax rules. As a result, Perl is wildly 
popular as a CGI platform in the Unix environment and has been 
ported to the major OS platforms, such as OS/2, MacOS, DOS, 
and Windows NT. 

Perl is a compiled language and sports one of the fastest compilers 
of any high-level language. However, Perl scripts are compiled at 
run-time; so using Perl scripts as CGI applications will give them 
that interpreted “feel.” The ubiquity of Perl throughout the major 
operating systems ensures that you will find a vast resource of CGI 
scripts available for your perusal. With minor modifications, you 
can incorporate diese Perl scripts into your server. 

MacPerl is a port of the Perl language to the MacOS. Scripts devel- 
oped in MacPerl are compatible with the popular Unix Perl distri- 
bution. This proves to be a huge incentive for using MacPerl as 
your CGI scripting environment. Scripts that you develop for your 
Mac WWW server will work on other server platforms as well. The 
converse is even more important; there are huge libraries of Perl 
CGI scripts available. These scripts wall port to your Mac server 
witli minimal modifications. 

To develop MacPerl CGI scripts that work with the MacHTTP or 
Webstar server applications, you will need the MacHTTP Script 
Extension included with the MacPerl distribution on this book's 
CD-ROM. 

C/C++ 

Many CGI applications written for the MacOS are developed using 
C or even C++. These languages exist for the Mac but require ex- 
ternal compilers and libraries to handle Apple events. Symantec’s 
Think C/C++ and Metrowerks’ CodeWarrior are good examples of 
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C and C++ compilers for the Mac. Even so, these environments 
required extensive libraries to process HTML form data. This diffi- 
culty is a trade-off, because scripts compiled using these languages 
will tend to run faster than interpreted scripts written in other lan- 
guages. Your scripts, in addition, will also be portable to Unix or 
Windows servers (although not as portable as Perl); this enables 
you to share CGI scripts with users of other systems. 

HyperCard 

HyperCard sports a user-interface language, HyperTalk, of which 
AppleScript is highly derivative. The two languages share much in 
the way of structure and even grammar. HyperCard is a multimedia 
authoring tool with roots deep in the Mac family tree. It is one of 
the oldest Mac applications for the Mac, dating back to the days of 
the venerable Macintosh II. 

HyperTalk is able to handle Apple events and can therefore manage 
inter-process communication. However, HyperTalk has always been 
criticized for its slow performance. Even though you can now com- 
pile external applications with HyperCard, these applications are 
not optimized for performance and tend to run much slower than 
applications compiled with higher-level programming languages. 
Similarly, CGI processing with HyperCard yields even slower per- 
formance than AppleScript CGI scripts do. For this reason, Hyper- 
Card is not a popular CGI scripting platform for the Mac. 

Application Programming Interfaces 

Yet another alternative to conventional CGI scripting lies with de- 
velopment of Application Progamming Interfaces (APIs). An API 
can be thought of as a series of subroutines that a third-party devel- 
oper can use to extend an application. For example, Netscape offers 
information about the Server APIs. In tliis way, you could write 
applications using these Netscape APIs that enable the Netscape 
server to perform functions that you would normally accomplish 
through CGI scripts. However, your code would actually be inte- 
grated with the server in a manner more cohesive than what can be 
accomplished through CGI scripting. 
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NOTE 






WebSTAR 3.0 will allow you to utilize a WebSTAR API so that fast 
server extensions can be developed. This capability should be 
available in mid-1996. 



Server Side Includes 

Server Side Includes (SSIs) are an alternative to CGI scripts. Using 
SSIs configured with your Web server, you can develop customized 
pages on-the-fly without the overhead of running an external appli- 
cation. SSIs are a standard complement to the NCSA HTTPd serv- 
er, from which MacHTTP and WebStar are derived. However, 
there are several types of SSIs available for Mac Web browsers. You 
must keep in mind that using SSIs will enable you to accomplish 
useful things on your Web server while restricting the portability of 
your code to other servers and systems. In this section, we’ll look at 
several kinds of SSI-type features available to you. Once again, 
you’ll need to consult the documentation accompanying these 
packages for a full discussion of the syntax and usage of these 
HTML extensions. 



NOTE . Quarterdeck has said that a future relccise of WebSTAR will in- 

dude support for SSIs. This capability should be available in mid- 
1996. 



InterServer Publisher InterXTML 

InterXTML is a set of extensions available to Web pages served 
by Intercon’s InterServer Publisher. Like other SSIs, you insert 
InterXTML tags into your HTML code. The tags are processed by 
Publisher and converted into HTML. For this reason, you are able 
to serve files that use XTML to ordinary Web browsers. 

You notify Publisher diat your HTML document contains 
InterXTML tags by inserting the following statement at the 
beginning and end of the file: 
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<InterXTML> 

</InterXTML> 

The main capabilities of InterXTML can be divided into three 
areas: 

□ You can display access counters telling users how many times 
your pages have been accessed. 

□ You can display the modification dates of your Web pages. 
This is useful for allowing your users to see how current the 
information is on your pages. 

□ You can provide listings of your directories in the form of 
HTML documents. Special InterXTML tags enable you to 
import the file properties, such as file names and icons for use 
in your HTML pages. 

Access counters and modification dates are cute add-ons to your 
pages that inform your users how many times certain pages have 
been accessed or how recently your page was modified. Access 
counters are neat, but are more prevalent out on the Internet 
and would not have a great deal of utility within your Intranet. 
InterXTML tags that display your files’ modification dates have 
greater utility, in that they will convey just how recent certain docu- 
ments are on your server. 

InterXTML lets you publish directory listings on your pages. As 
mentioned in Chapter 4, Unix Web servers enable you to list the 
contents of directories simply by specifying the directory in the 
URL. For security reasons, this feature wasn’t implemented in 
MacHTTP, WebSTAR, or InterServer Publisher. However, 
InterXTML enables you to not only display the folder contents in a 
Web page, but also enables you to display the file icons, names, 
comments, size, and other information as well. This InterXTML 
feature has great potential by enabling you to automatically develop 
file descriptions that your Mac, Window, and Unix Intranet users 
can peruse and use to download files in your archives. 





220 



Building and Maintaining an 



Intranet with the Macintosh 



NetCloak 




NetCloak, from Maxum Corp, is a set of server extensions similar 
to InterXTML. Unlike InterXTML, NetCloak works with any Web 
server that understands certain Apple events. NetCloak extensions 
allow you the following capabilities: 



□ You can secure documents or even sections of documents 
from certain users based on user name or domain name. 

□ You can exhibit different parts of your document at different 
times of the day or year. 

□ You have full access to many CGI variables, such as user cli- 
ent, user IP address, browser type, and other types of data. 

□ NetCloak enables you to develop simple macros that contain 
frequenriy used HTML code. 

NetCloak enables you to implement several features that may have 
a lot of appeal within your Intranet. With NetCloak’s security fea- 
tures, you can cloak sections of a document that you want to 
restrict viewership to the members of management in your organi- 
zation. Groups within your organization can post work schedules 
viewable only to relevant members. Using NetCloak macros, you 
can customize your pages by adding standardized headers and 
footers. 



NOTE 




For customizing your HTML forms, check out Msucum's NetForrris 
HTML extensions package. 



Tips for Writing CGI Scripts 

Now that we’ve covered some of the environments that you can 
employ to develop CGI scripts, we can discuss some tips that you 
can keep in mind while developing these new applications. 
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Portability 

In developing your Intranet, chances are that you are starting small. 
You may even be running your Web server on a 680x0-based Mac. 
As your own Net grows, you may have a desire to expand your 
server to a different Mac model, different server software, or even 
(gulp!) a Unix or Windows NT platform. If you do plan to migrate 
your software to a different environment, you’ll need to ensure that 
your CGI scripts are portable. For example, you get several benefits 
by using SSIs; however, SSIs are usually specific to the server soft- 
ware. Using proprietary adjustments such as SSIs enable you to do 
sophisticated HTML processing, but at a cost of portablity. 

Optimize for Your System's Needs 

Perl is a wonderful CGI language and is perfectly capable of han- 
dling many types of scripting objectives. However, Perl is an inter- 
preted language, as opposed to C++ which is a compiled language. 
Perl scripts are therefore going to run more slowly than C scripts 
that perform the same functionality. Compiled applications will run 
much more quickly than their interpreted peers. 

Using the Script Libraries 

Make sure that you can develop scripts that are complicated, but 
available on the Net. Surfing the various CGI archives still will en- 
able you to pull down popular scripts. At the very least, scripts 
found on the archives present a good starting point for your script- 
ing development. 

Building Imagemaps 

Anyone who’s surfed the Web for a long period of time has run 
across imagemaps. Imagemaps are graphical images that contain 
designated “hot” areas that act like buttons. Clicking on one of the 
“hot” areas brings up another page or performs some type of ac- 
tion. Imagemaps make use of CGI scripts, so this is an appropriate 
time to discuss how imagemaps work. 
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How Imagemaps Work 

Very often, you will want to present a user with a list of options — 
go to next page, go to previous page, go to home page, send mail 
to Web administrator, and others. You may want to display these 
options on various pages. You could do this using a bulleted list or 
some other variation of standard HTML. However, imagemaps 
enable you to present options to your user in a graphical format. 
Imagemaps are really just a list of URLs that present navigation 
options to the Web user. 

The imagemap process works something like this: 

1 . The user is presented with an imagemap that has several links 
to other documents buried within it. 

2. The user clicks somewhere on the image. 

3. The Web browser records the location of the click in the im- 
agemap’s frame of reference and passes that information on to 
the Web server. 

4. The Web server passes the click location to a CGI script 
(which was designated in the imagemap URL), which then 
correlates the click location with a predetermined hotspot on 
the map. 

5. If there’s a URL associated with that hotspot, the CGI script 
returns that URL to the server. If no hotspot was activated, 
then a default URL is returned. 

6. A page corresponding to the URL returned by the CGI script 
is loaded into the user’s Web browser. Life is good. 

What You'll Need to Build Imagemaps 

The only trick to imagemaps is defining the hotspots on the graph- 
ics image. There are three things that you’ll need to develop 
imagemaps. You’ll need the following: 
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□ A graphics image 

□ A software application that lets you define the hotspots and 
associate them with URLs 

□ A CGI script that translates the click locations to URLs 
Let’s look at these elements one at a time. 

Getting a Graphics Image 

You need to produce a graphics image on which you want to 
build an imagemap. You can use any graphics application you like, 
providing that the end result gives you a graphics format that 
you can display on your Web pages. Deneba Canvas (http:// 
www.deneba.com) and Adobe Photoshop (http:// 
www.adobe.com) are two popular applications for building 
these types of images on the Mac. 

The latest versions of both Canvas and Photoshop produce JPEG 
and GIF graphics. Other Mac graphics applications may not pro- 
duce files in these formats. However, most applications will pro- 
duce PICT files which can then be translated to GIF or JPEG, using 
applications such as GlFConverter, GraphicConverter, or JPEGView 
(http://www.med.cornell.edu/jpegview.html). 

Because you’ll likely include text in your image, GIF is a good for- 
mat to use for imagemaps. As we talked about in Chapter 6, “Cre- 
ating an Efficient Web Site,” GIF files store and display text more 
efficiently than JPEG files. If your image is comprised of a photo- 
graph or some complicated grapliic that does not contain text, then 
you may be better off using the JPEG format. 

Creating the Hotspots 

In order to create hotspots on a graphic image, you’ll need a special 
imagemap creation application. There are several specific Mac appli- 
cations for this purpose. We’ll talk about WebMap in this section. 
However, several high-end HTML editors have imagemap creation 
capability built into the software. 
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Adobe PageMill has an easy-to-use imagemap creation tool built 
into the editor. For more information about PageMill, see Appen- 
dix C, "Perfecting HTML" 



Using an Imagemap CGI Script 

You’ll also need to create or a CGI script that will map the user 
mouse clicks to your predetermined hotspots. We’ll be discussing 
the application MapServe for diat purpose in this section. 



Creating Imagemaps with WebMap 




WebMap 1.0.1 is a shareware application designed to build im- 
agemaps from existing PICT, GIF, or JPEG files. WebMap 2.0 is in 
beta testing as of this writing and should be available by the time 
you read this. However, this version of the software will be strictly 
commercial as opposed to shareware. Lx)ok on this book’s CD- 
ROM for a link where you can download a copy of WebMap 1.0.1. 



Creating Imagemap Hotspots 

Developing an imagemap in WebMap is extremely simple. Double- 
click on the WebMap icon to launch the application. Load the 
test.gif graphics file into WebMap using the Open command. You 
should see a series of shapes. The toolbar lets you define a series of 
shapes superimposed on the image. You have the choice of using a 
rectangle, circle/oval, or polygon. 

Two types of imagemap standards are in use at this time. The 
imagemap files are formatted differently, depending on whether 
they adhere to the CERN or NCSA standard. The NCSA standard 
allows the use of ovals in addition to circles and is more widely 
used than the CERN standard. WebMap defaults to the NCSA 
standard, but you can alter this under the Preferences command. 
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Note that you can use the shapes on the toolbar to draw the 
hotspots you’ll need to define in the imagemap. Simply click on the 
desired shape around the desired area and the phrase [Undefined] 
will appear in the URL column. Double-click on the [Undefined] 
phrase and enter the URL you’d like to associate with that hotspot. 



NOTE 






You use the WebMap polygon tool like you do with a polygon 
tool in any drawing program. You close the polygon by double- 
clicking the starting point of the shape. 



You cannot expect the user to be able to click right in the desired 
shapes; they might accidentally click a region of the imagemap 
where you have not defined a link. Therefore, you’ll want to define 
a default URL that will be called by the CGI script when the user 
clicks a portion of the image not defined by a hotspot. Under Edit, 
choose Set Default URL to define the URL returned in these 
instances. 



Creating the Imagemap File 

Once you’ve defined all your shapes within WebMap, you’ll need to 
write the information to a file that can be read by a CGI script to 
process the map. This is done by clicking on File and choosing 
Export as Text. WebMap will prompt you for the map file location; 
create a folder accessible by your Web server in which you’ll store 
your imagemaps and the imagemap CGI application. Before saving 
the document, you’ll be able to check whether or not you want the 
file in CERN or NCSA format. For the example shown in Figure 
7.15, WebMap will create the following output: 

default http://www.anywhere.com/oops.html 
circ http://www.anyplace.com/page2.html 76,2 231,67 
rect http://www.anyplace.com/page3.html 147,75 292,145 
poly http://www.anyplace.com/page1.html 0,87 3,154 
^83,158 123,118 74,69 0,87 

Note that this file contains a default URL and three shapes. The 
shapes are listed in terms of imagemap coordinates in x,y pairs. 
While working in WebMap, the coordinates of your mouse location 
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are given in the lower left portion of the screen as designated in 
Figure 7.15. Save this file with the .map suffix in your predeter- 
mined imagemap folder. 




Figu re 7. 1 5 WebMap provides a pfraphical interface for you to 
develop imagemap files. 



Using an Imagemap CGI Script 




Now that you’ve got your imagemap file configured, it’s time to 
introduce it to your server. You’ll need a CGI application that is 
specially configured to serve imagemaps. One application that 
works well with WebSTAR, MacHTTP, or any other CGI-enabled 
Mac HTTP server is the shareware application MapServe. 
MapServe consists of an asynchronous CGI that is launched when 
referred in a URL. Look on this book’s CD-ROM for the link to 
MapServe’s home page where you can download a copy. 



Place die MapServe. acgi file in a folder accessible by your Web serv- 
er. You may want to store your imagemap files in the same location. 
In your Web pages, you can access your imagemap using a URL 
constructed as such: 



<A HREF='7<imagemap path>/mapserve.acgi$test .map“> 
<IMG SRC=” test.gif" ISMAP></A> 

In the above statement, you’ve included information about the 
location of tiie CGI script as well as the imagemap file name. 
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You’ve bracketed the test.gif image discussed above with the 
imagemap anchor. Note that the ISMAP attribute was used in the 
<IMG> tag telling the browser that this image is actually a clickable 
imagemap. A user clicking on this image will bring up one of the 
URLs you specified using WebMap. 




The MapServe documentation includes information on how you 
can set up MapServer as a user-defined action in WebSTAR. In this 
way, you can tell WebSTAR to run MapServer when a file contain- 
ing a .map suffix is included in a URL. 



Client-Side Imagemaps 

Imagemaps are often used for navigation aids. Many Web authors 
direct users to different parts of their site using elaborate graphics. 
However, this may seem like a waste of time and processing. With 
imagemaps, you are calling up a CGI which does nothing but redi- 
rect you to another Web page. This is somewhat underwhelming 
compared to the power and flexibility you can express using the 
CGI scripts we’ve discussed above. Furthermore, you need to have 
access to a Web server to use your imagemaps. Many Web authors 
test their pages on a local machine before moving them to the per- 
manent server site. On a local machine separated from your HTTP 
server, your imagemaps will be useless, but awfully pretty graphics 
files. 

Netscape has instituted support for HTML 3.0 client-side 
imagemaps in the Navigator browser. The idea behind client-side 
imagemaps is that you no longer require the use of a CGI script to 
direct users to other Web pages. Client-side imagemaps are set up 
much like conventional imagemaps, except that the shape defini- 
tions and URLs are included in the HTML code. As a result, 
client-side imagemaps execute much more quickly tlian conven- 
tional imagemaps. See Appendix C, ‘‘Perfecting HTML,” for a 
more specific discussion of client-side imagemaps. 
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Summary 

CGI scripting should be an integral part of your Intranet Web ser- 
vices. With these scripts, you’ll be able to offer useful services to 
your Intranet users. There are several programming languages to 
use for your scripting environment. Frontier and AppleScript are 
perhaps the two most popular although MacPerl has a large follow- 
ing as well. The future should bring server side includes, robust 
Java implementation, and APIs to the MacOS; so CGI scripting 
miy have a totally different look before too long. 

In Chapter 8, “Databases and Document Searches,” we’ll see how 
sophisticated CGI scripts can be used in searching documents and 
accessing databases. You may be interested in jumping to one of the 
following chapters: 

□ Chapter 4, “Macintosh HTTP Servers,” to learn about the 
different software you can use to set up World Wide Web 
services on your Mac. 

□ Appendix C, “Perfecting HTML,” to learn about some ad- 
vanced HTML programming features, as well as how to use 
some popular HTML editors including Adobe PageMill and 
BBEdit. 

Links Related to This Chapter 

StarNine Technologies http://www.starnine.com 

InterCon Systems, Inc. http:/ /www.intercon.com 

AppleScript Home Page http://dev.info.apple.com/ 

solguide/AppleScript.html 

ScriptWeb http : / /www.scriptweb .com / 

scriptweb 



Late Night’s Script 
Debugger 



http ://dev.info . apple .com / 
solguide/script.html 
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Main Event’s Scripter 


http://www.yy.net/bis/ 

mainevent/scripter.html 


Full Moon’s Script 
Wizard 


http ://A\ww.fiillmoon.com/ 
fmsdl/products/ 
fms_scriptwiz .html 


Parse CGI Home Page 


http://marquis.tiac.net/ 
software/parse-cgi-osax- 1 2 .hqx 


ROFMCGI 


http ://rowen . astro . 
Washington . edu/ 


MacPerl Q&A 


http://err.ethz.ch/members/ 

neeri/macintosh/perl-qa.html 


MacPerl FTP archive 


ftp://ftp.share.com/pub/macperl 


MacHTTP CGI Script 
extension 


ftp://err.ethz.ch/pub/neeri/ 

MacPerlBeta/ 


Frontier Home Page 


http://www.hotwired.com/ staff/ 
userland/aretha 


Frontier CGI Scripting 


http: //www. webedge.com / 
frontier 


Low Tech Object DB 


http://www.scripting.com/ 

root.html 


Maxum Corp 


http:/ /www.maxum.com 


Usenet 


comp.infosystems.www.servers.mac 




comp.infosystems.www. 

authoring.cgi 


Apple Mailing Lists 


http://www.solutions.apple.com/ 
apple “internet/ 






CHAPTER 




Databases and Document 
Searches 



This book has covered elementary CGI scripting, but you’ve really 
just scratched the surface on what you can do on the Web. Don’t 
get me wrong — access counters, post-queries, and server-side in- 
cludes allow you to put lots of cool features on your home page. 
Still, you might wonder if there’s more to CGI scripting than the 
litde parlor tricks we discussed in Chapter 7. Now we’ll talk about 
adding raw power to your Web site by allowing your Intranet users 
to search documents and databases. 

This is where a lot of the utility of your Intranet comes into play. 
With a simple and inexpensive Web browser, your users can gain 
access to the vast amounts of information your organization has 
stored in piles of forgotten documents and databases. Widi a mini- 
mal amount of setup, you can configure your existing databases and 
documents for access via the Web. 

When you think about it, most of the work performed by members 
of your organization exists somewhere on someone’s computer. 

File after file are safely stored on different desktop computers, un- 
reachable by anyone but their author. With modern CGI tcchnolo- 
g)', you can allow your users to search these documents, regardless 
of their format and location within your Intranet. 

The work involved in programming databases is way too involved 
for this chapter. Modern databases are written using sophisdeated 
programming languages; constructing them requires a great deal of 
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study, experience, and sweat; you won’t be learning how to develop 
databases in this chapter. However, you will be exposed to the 
following: 



□ A brief introduction to databases and their uses on the 
Macintosh 

□ An introduction to Tango — an application that lets you cus- 
tomize a Web front-end to your databases 

□ Different methods you can use to search documents on your 
Intranet Web sites 



Database Primer 

Let’s first discuss databases and how they’re used in the modern 
workplace. There are several different flavors of databases in the 
computing world. Databases have grown in sophistication over the 
years. Whereas older databases stored information in static formats, 
much like library card catalogs, modern databases are dynamic ap- 
plications with which sophisticated modeling and analyses can be 
developed. 



Introduction to Databases 

Databases are applications that store sets of data in an easily retriev- 
able format. In that sense, an Excel spreadsheet is a rudimentary 
database. In a spreadsheet, you can store data in a tabular format 
that is easy to read and retrieve. 

Modern databases allow administrators and analysts to work with 
the data in a far more sophisticated fashion than afforded by an 
Excel spreadsheet. Nowadays, you can set up sophisticated rules 
using advanced programming languages to manipulate and orga- 
nize your database contents. Furthermore, you can develop sophis- 
ticated graphical user interfaces to interact with your database. 
These interfaces can access your database from remote computers, 
even those running different operating systems. For example, you 
can run a compiled database front-end on a Mac that interacts with 
a database that resides on a Unix machine. This type of operation. 
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between a front-end interface and a database, is known as a client- 
server relationship. 

Databases are comprised of tables; these tables are comprised of 
columns and rows. When you add data to a database, you add it in 
terms of rows. This is very much like the familiar spreadsheet data 
format you see in Microsoft Excel. However, databases differ from 
spreadsheets, in that you display spreadsheet information in rows 
and columns; with Microsoft Excel 5.0, you can even have multiple 
spreadsheet tables in the same document. In contrast, database 
information is stored in rows, columns, and tables; this organiza- 
tion is often unseen by the user. Database contents are often dis- 
played in formats developed by the user. For example, you could 
display information from a financial database in a spreadsheet for- 
mat or include it in any report or table format. 

Sophisticated databases do more than just store data or give you 
graphical means of accessing the data. Advanced programming 
using the Sequential Query Language (SQL — ^pronounced 
“sequel”) is possible. SQL is a standardized database manipulation 
language that allows you to develop sophisticated programming 
constructs. You can develop if-then clauses or looping constructs 
that operate on the contents of your databases. Rather than just 
store the data, you can create new data based on SQL operation of 
your database contents. Furthermore, SQL allows you to develop 
sophisticated control and procedural structures as well, much like 
C/C++ and Pascal. 

Many of the larger Web sites allow access to internal databases. 
Some of the larger Web search tools, such as WebCrawler, Lycos, 
Alta Vista, and others, actually send automated programs out on 
the Internet to access Web pages. The search engines then down- 
load those pages to a large internal database on the search service’s 
site. When you search for a keyword to be found on a Web page, 
you are actually searching an internal database. Similarly, lots of 
companies post online catalogs where you can peruse their product 
offerings; often you are cruising through a gateway into that com- 
pany’s internal database. We’ll spend some time talking about how 
you can use an application, known as Tango, on your Web server to 
provide access for your Intranet users to your internal databases. 






234 



Building and Maintaining an Intranet with the Macintosh 



Databases on the Macintosh 

There are many types of database applications for the Mac. Recent- 
ly, the viability of the MacOS as a database platform was given a 
boost by ports of the Oracle and PowerBuilder front-ends. Oracle 
Power Objects and Powersoft’s PowerBuilder are recent additions 
that enable you to develop graphically oriented applications on the 
Mac that interact, via the Internet, with databases that exist on 
Windows NT or Unix workstations. However, there are stand- 
alone databases that reside under the MacOS. 

FileMaker Pro 

Claris FileMaker Pro (http://wwwxlaris.com) is a popular database 
application for the MacOS. The product recendy underwent an 
upgrade, transforming the database architecture to a relational 
foundation. This is relevant, as a relational database allows you to 
store data based on common threads or concepts that you define. 

There are several CGI scripts that have been developed, which al- 
low you to link your Web server to FileMaker Pro. These CGI 
scripts allow you to query the database via an HTML forms inter- 
face. Users can set up database queries that until recendy had only 
been possible using compiled database front-ends. 

4th Dimension 

ACI-US 4th Dimension (http://www.acius.com) is a sophisticated 
cross-platform client-server application. 4D, as the application is 
often referred to, sports an object-oriented layout editor, a power- 
ful programming language, and an optional language compiler that 
can be used develop faster client applications. 4D also comes bun- 
dled with tools that allow you to develop Web and CGI interfaces. 

Butler SQL 

Butler SQL, from EveryWare Development Corp. (http:// 
www.everyware.com), is a high-end relational database for the Mac. 
Like 4D, it is a client-server cross-platform application. Butler SQL 
is built on a powerful programming language. Data Access Lan- 
guage (DAL); it comes with several tools, such as ButlerTools, 






Chapter 8 Databases and Document Searches 


235 







which allow you to easily develop database applications. Butier SQL 
also supports the Open Database Connectivity (ODBC) standard 
that allows it to connect, via TCP/IP and other protocols, to data- 
bases on different platforms and from many different manufactur- 
ers, such as Oracle, Sybase, and Informix. 

Using Butler SQL 

In Chapter 7, you learned a great deal about CGI scripting on the 
Mac. The sophisticated features of your Intranet will require some 
advanced CGI scripts. Your databases, however, are sophisticated 
data storage facilities. It’s one thing to program a simple access 
counter script or an HTML form query. However, writing CGI 
scripts, in languages like AppleScript, UserTalk, or Perl, to search 
and retrieve data from your database requires a considerable 
amount of effort and skill. 

EveryWare Development Corp.’s Tango is a means of streamlining 
CGI development. Tango offers a graphical interface for linking 
between your Web server to a variety of databases. Most notably. 
Tango comes bundled with EveryWare’s Butler SQL database. Spe- 
cifically, Tango was originally designed to work with Butler SQL; 
however. Tango now adheres to the Open Database Connectivity 
(ODBC) standard so that Tango can work with several types of 
databases including Oracle, Sybase, and Informix. 

Using Tango’s graphical interface tools, you can develop interfaces 
between your Web server and your database. Specifically designed 
to work with StarNine’s WebSTAR Web server. Tango prevents you 
from having to develop code using complicated database syntax or 
even HTML. By not having to do with the vagaries of these lan- 
guages, you develop custom CGIs in a drastically reduced amount 
of time. 



— ^ 

NOTE . ^ 



See Chapter 4, "Macintosh HTTP Servers," for more information 
on WebSTAR. 
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Introduction to Butler SQL 

Before we talk about Tango and the various tools allowing you to 
construct Web pages, let’s discuss the underlying database structure 
through which Tango is derived. EveryWare’s Butler SQL is a pop- 
ular client-server database for the Macintosh. However, you are not 
limited to just serving Macintosh computers; with proper network 
configuration, clients under botli Windows and Macintosh plat- 
forms can access Buder SQL databases. 

Once again, the intent of this discussion on Buder is not to educate 
you on the use of the database. Every Ware provides hundreds of 
pages of documentation on Buder, and I can’t hope to give you a 
more specific introduction than that. My intent is to introduce you 
to the Butler SQL application, talk a little about how it works, and 
give you examples of how it works with Tango to display database 
contents on the Web. 

Installing Butler SQL and Tango 

My intention in this section is to introduce you to the capabilities 
of Tango and some of the tools that you can use to expose your 
databases to your Intranet. You’ll need at least 12 MB of RAM on 
your Mac to comfortably run the operating system, Butler SQL, 
and WebSTAR. 

Go to the Butler SQL/Tango folder on this book’s CD-ROM. 
Double-click on the Butler SQL Test Drive Installer icon to install 
the software on your startup disk. Take the Tango folder and move 
it inside of your WebSTAR folder. This Tango folder contains the 
Tango CGI and various databases that you’ll need to run the dem- 
os in this chapter. 

You can run Tango on a different computer than your WebSTAR 
server. You can even install Tango and Butler on Macintosh com- 
puters other than your WebSTAR server. All computers need to be 
accessible on the same local or wide area network. However, for 
the purposes of simplicity, I'll assume that you'll be running Butler 
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SQL, Tango, ahd WebSTAR on the same computer. The Tango 
documentation dehuis how to install toe applications on different 
computers. 

The Buder SQL/Tango Installer will insert several folders in your 
computer’s Preferences folders. Specifically, the Public Databases 
folder inside the Buder Preferences folder needs to house the But- 
ler databases that you wish to query through the Web. For each 
example in this section, you will need to move the relevant Buder 
database to this folder. 

A Brief Butler SQL Primer 

The version of Butler SQL that comes on this book’s CD-ROM is 
actually a limited demo version that restricts you to creating data- 
bases of no more than 100 records per database table. Let’s look at 
the tools and applications that work with Buder SQL. 

In your Buder SQL Test Drive folder, you’ll see the Buder SQL 
Test Drive application. Like the full-featured Buder SQL applica- 
tion, Buder SQL Test Drive, Buder as we’ll refer to it in this chap- 
ter, is a relational SQL database. The version of Buder is distributed 
on the CD-ROM as a fat binary, meaning that it will work with 
680x0-based Macintosh computers as well as Power Macs. 

Similar to an HTTP server, Buder serves data based on requests. 
These requests are phrased in SQL and are answered by Buder 
using desired contents of the server specified in the SQL request. 
Buder actually employs a SQL dialect known as Data Access Lan- 
guage (DAL) but will understand requests using any language that 
adheres to the SQL standard. 

The Buder application really does nothing more than accept re- 
quests and send data to clients. Most of the database configuration 
is done by the ancillary applications such as BuderTools, described 
in the next section. You can set up Buder connections with the 
Buder applications through communication links that EveryWare 
calls ports (not to be confused with IP ports). You can set up But- 
ler ports that allow users to link to the Buder server through 
System 7 file sharing, network, modem, or serial connections. 
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Creating Databases with ButlerTools 

BuderToois is the applicadon that you use to create and maintain 
Buder databases. With BuderToois you also can import existing 
data from ASCII files, spreadsheets, or other databases into your 
Buder databases. You also use BuderToois to create users and 
groups, thereby defining their database access privileges. 

Let’s take a look at a database using the BuderToois applicadon. 
Double-click on the BuderToois application icon. Once the appli- 
cadon has launched, click on File and select Open Database. Locate 
the Seminars_db database and open it; on the CD-ROM, this file 
will be located in the Tango folder. You will see a window contain- 
ing the names of the tables contained in the Seminar_db database, 
as shown in Figure 8.1. 



I SemlnarJlB i 





•Rpvf 
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□ Rt0>tr4ttons 


26 




Q StiTifirurs 


13 


o 



Figure 8.1 ButlerTools allows you to examine the number of tables 
contained in a Butler database. 



In this window, you see the three tables that comprise the database: 
Customers, Registrations, and Seminars. You can tell how many 
rows of data are contained in each table. Double-click on the Cus- 
tomers table; you should see a window much like that shown in 
Figure 8.2. Each of the columns in the table is listed along with its 
variable type, length, column tide, and initial value. You can modify 
any of these parameters by either clicking on the Schema menu and 
selecting Edit Column, or by simply double-clicking on the col- 
umn. For example, clicking on the Student column gives you a 
window as displayed in Figure 8.3. Using this editor window, you 
can change any of the column parameters. 
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Butler data types are varied in scope. You can store data as Bool- 
ean, integer, or floating point representations. You also can store 
dates, time, text strings, documents, sounds, small graphics, and 
even movies. Some of these data types can describe data as large 
as 2 GB that is useful for indexing large documents and files in a 
Butler database. 




Figure 8.2 The tables of a Butler database are comprised of 
different columns. 




Figure 8.3 Tou can define the data types of the individual 
columns in each table. 
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ButlerTools also allows you to import data into a specific Buder 
table. This data can come from any program that will export data 
into a tab-, space-, or comma-delimited text file. Virtually any 
spreadsheet or data analysis package can export files in this format. 

Another useful feature of BuderTools is the development of data- 
base access privileges. You can assign user and group access privileg- 
es for each database and database table available on your Buder 
server. Buder allows different users to connect through communi- 
cation ports. BuderTools allows you to protect or restrict access to 
Buder databases or tables within the databases. 

ButlerClient 

BuderClicnt is a basic DAL client application you can use to trou- 
bleshoot and test your DAL code. Using BuderClient, you can 
send sections of DAL code to your server, have them executed, and 
observe the results. In this way, you can test how your server would 
respond to an actual database query. 

other Butler Front-Ends 

Induded with this Butler demo are several toolkits that you can use 
to develop interfaces to Buder using AppleScript, FirstClass, and 
HyperCard. With BuderLink/AppleScript, you can develop scripts 
that will query and return information from Buder databases. For 
example, you can develop a script that is executed each morning 
that pulls down data from a financial database. 

Butierlink/FirstClass database extensions are FirstClass database 
add-ons for accessing Butler SQL databases from SoftArc’s First- 
Class (http://www.softarc.com) communications system. With 
FirstClass, you could set up a bulletin board system that could serve 
the contents of a Butler database. 

BuderLink/XCMD is a means of setting up a HyperCard interface 
to your database. HyperCard can be configured to display textual, 
numerical, and graphical data from your Butler database. 
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Introduction to Tango 

Now that you have had a brief glimpse of Buder, it’s time to figure 
out how to implement a Web-based front-end to your Buder data- 
bases. Tango adheres to the ODBC standard that allows you to 
interact with any ODBC-compliant database applicadons including 
Buder (of course), Oracle, Sybase, Informix, FoxPro, as well as 
Excel and several others. Tango allows you to interface with these 
databases without having to deal with SQL, CGI scripting languag- 
es such as C/C++ and Perl, or even HTML. 

Examples Using Tango 

We’re going to run some of the examples that are included in the 
Tango demo. Later in this section, we’ll look at some of the tools 
involved in setting up these examples. To run these examples, or 
any other Tango query, you’ll need to have the following condi- 
tions in place: 

□ The Buder SQL Test Drive application must be running. 
Double-click on the Butler SQL Test Drive application in the 
Butler SQL folder. 

□ The WebSTAR server must be running. 

□ The Tango folder must be located inside of the WebSTAR 
folder. 

Open the following URL: 

http://<your server name>/Tango/def ault.html 

You’ll need to substitute the address of your Buder/SQL server for 
<your server namc>. Figure 8.4 shows the Tango default page. You 
have several examples listed in the page. Clicking on any of the 
links in the list shown here will activate some of the Tango demos. 
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Tango Demos 



Just click on any of the links below to start a Tango solution demonstration. 



• g a ^fjed s Dgng 

• Conferances/BBS Demo 

• Dga g 

• Event Re g istration Demo 

• gemiTWifPemo 

• Han gipriiin 



Tango and the Tango Demos are brought to you by; 





Figure 8.4 This default Tan^fo pa^e isajumpin£i point for several 
of the demos discussed in this section. 



Automobile Classifieds Example 

Before running the demo, you’ll need to move the relevant Butler 
database to the Public Databases folder buried deep in your Prefer- 
ences folder. In the Tango folder, that you’ve just moved to your 
WebSTAR folder, open the Car_demo folder. Each demo folder has 
a nested folder entided Utilities. You’ll find the Tango databases 
located in these Utilities folders; in this case, either move, alias, or 
copy the cars_db file to the Public Databases folder. These sample 
Butler database files will all have the suffix _db. 

Click on the Cars Demo link. You should see the demo window, as 
shown in Figure 8.5. Note that you have a series of popup menus 
and text fields awaiting your input. By selecting several of the fields, 
you can extract portions of the database that match your search 
criteria. 





Figure 8.5 The Tan 0 o cars demo allows you to search a database 
for cars that correspond to certain criteria. The information on the 
cars is stored in a Butler database. 



Select the various popup menus shown in Figure 8.5. These 
options are 

Vehicle Type: Sports 

Vehicle Name: Starts with (leave text field blank) 

Manufacture: Starts with (leave text field blank) 

MSR Price: Is greater than (40000) 

Click on the Search button. 

You will see a list of various database entries that match your search 
criteria, as shown in Figure 8.6. According to your search query, 
the results are displayed in an HTML table format. Note diat the 
car model names are set up as hyperlinks. Clicking on one of the 
hyperlinks brings up one of the database entries, as shown in Figure 
8.7. 
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Here are the can that match your search criteria: 
I [MSR Price | 



|Corvette 


1 Chevrolet 


46Q40iX) 




iFerrari 


162540J0Q 


|512TR 


1 Fermi 


258000 jOO 


|EspritS4 


[Lotus 


1450001)0 


RX-7 


Mazda 


48790110 


i^lCftxniA 


Poreehe 


8^M~ 


Supra 


Toyota 


6^i)0~ 



Click a vehicle in the list to read the details and to see a ptctme. 
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Figure 8.6 Could you afford any of these? These database entries 
are returned by your search of a Butler database. 
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Figure 8.7 The car of your dreams awaits you in a Butler data- 
base. This car matches your earlier search criteria. Note that you 
are able to call up both graphics and text as a result of the database 
search. 
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Note that the database entry describing this car contains a variety of 
information. Furthermore, a picture of the car is included as well. 
This graphic might just as well have been a movie or even an audio 
file that you could have used to display a different types of files. 

You could even store alternative file formats for display using 
Netscape plug-in modules. You could construct a similar database 
using Ruder SQL or any other ODBC-compliant system and use 
Tango to develop a Web-based front-end. 




See Chapter 9, Beyond HTML," for more information on 
Netscape plug-in modules. 



Seminar Demo 

To run this example, look for the Seminar_db file in the Utilities 
folder inside the Seminars folder. Move, copy, or alias this file to the 
Public Databases folder. Go back to the Tango demo page and click 
on the Seminar demo link. A page similar to that shown in Figure 
8.8 will appear. 



I Netscape: Welcome 



Btk |Fior>rtrtj Hunt | Rtle^d ) tewgtg | Opwt }- Print j ' 



V!»<*sWtv?| Vh*t*<Coo1?| H«ndbock | ^ N»iSMrCh | MX WrKtary { SetWtn 

Welcome to the seminar page. 



This site is for demonstration pvirposes only. Your IP address is being logged. Please 
be reasonable when using this demo. 

Users can automatically register for future treixUng sessions if availability permits. 

Here you will be able to gat some information on, and reg^er for. the great 
seminars that are available in the next few months. 

General access users would see this URL: 

^ RsgyEteLfaLgcmiiw? 



Site Administrators would see these URL's: 
^ Add Seminar 

Show seminar status 

^ Add Cus toms 

^ Changing- Deleting Customer 



Figure 8.8 Business seminar schedules can be posted on the Web 
using Tango. 
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This page allows you to register and check the status of some hypo- 
thetical seminars. For further examination, click on the Show semi- 
nar status link. You’ll see a window similar to that shown in Figure 
8.9. You’ll be shown a list of seminar subjects from which to 
choose. Click on the HTML link. 



fiiirrvir. _ —-iJ Netscape: IPelcome ^ 




Z2^»S 


BDk iFcrvwdI Homs ) RsM ] | Optti \ Pr^t | FM | 




iSI 


1 Loostten: [http 7/1 92.0.1 .2/T*ngo/T*nQO *ofl1$/S#mtn*rs/Show_S*n>1r\*rs_Adm1n.qrg ' 


fiau 


1 Vh«t'sNtv?| Vh<t'sC(>»1?| | | tMDtrsctoryl 


Softvart 1 




— 





GHsilwTKK Training Sir«icK. 
Computer Seminars 





Here you will be able to «t some Information om and register for, the great 
seminais we have aviil&le for the next fow months. 

Pick a categpiy to see what's in store: 

[ HTML 

[ raid" 

'WpniprKWflDs 







Figure 8.9 Click on the seminar subject for the status you want to 
check. 



You should then see the HTML-related seminars layed out in a nice 
orderly HTML table, as shown in Figure 8.9. Each seminar is dis- 
played with information regarding its location, date, time, sponsor, 
number of registrants, and the seminar capacity. All these data are 
fields in the Seminar_db Budcr SQL database; you arc using Tango 
to extract these fields and display them on a Web page. 
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uaiegories 



tocat>0ft:|htt p:/yt^i). 1 2/T<n9 o/T«i^ .<ogi$/ S»ni>^r»/S» rptnir_&j-C>tfyiry_A<amin.grv 

V>xt*< V^li[ Vh<r> C»rt» f i titi i tMIHmteryl Sofhrir» | 



B 



BosiDeTecK Training Services 
Computer Seminars 



HerB'f t list of seminan we'll be bolding in the next few months. To got more 
ixtfbrmation or register, just click the seminar you're interested in. 



Looalkn Date Time 


Seminar Title 


Sponaor 


Reg. %em 


Toronto 01/01/1996 l-5pm 


IHTML for 
Beginners 


Geco 

Distributing 


i4 


100 


Toronto 01/01/1996 8am-lpm 


HTML for 


Geco 

Distributing 


7 


100 


Toronto 01/07/1996 l*5pm 


HTML for 
Beginners 


Geco 

Distributing 


3 


|1Q0 


Toronto jOl/07/1996 8am-lpm 

: . . .1 . : 


HTML for 
:ErBfegjpnftls 


jGeoo 

'Distributing 


iT~ 

1 


|ioo 


Toronto ||oi/14/1996 l-5pn 


HTML for 
Beginners 


ICcoo 

jOistribullng 


lo 


'f 

jloo 



Figure 8.10 Click on the various HTML seminars to find out 
their status. 



Finally, click on the top entry under the Seminar Title column, 
HTML for Beginners. As seen in Figure 8.11, you’ll see another 
HTML table containing the names of people currendy registered 
for that seminar along with data about the registrants. 



13: - ^ Netscape; liielcome ; , : 

BaSk Ifcrvarsl Hww ] Patead ] amys j Opw | Pnfrt | Rnd j aio» j 
LoaatlM:{Mtp.//l92 0 1 2/T«n^/Tan90.<OQt1/S«min«rs/R»gn1»r»<] qrv ?SafnavvJD"l 
VtUt's Nn»y I Vbafi Ccal? j I tandbook | HKSaarch | HatOkrtatoryl Bafbaara 




BusilvTech Training Services 
Computer Seminars 



J 



a 



Registervd to thit seminar. 



Customer ID Reg^eied Student 


CuskenerName 


1 

5 


09/27/1995 henry EvexyWaze Development Corp 

09/27/19% Wud Bush Lenawee ISD 


.11 


09/29/1995 me 


test 


[2 


:10/03/1995 ]ot 


StarNine Technologies. Inc. 


MoinMgnvL 

tangi) 






Irjrf^lil DasmuanDaoa. 





Figure 8.11 ^^What do you mean Fm not register edF 
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This example shows the power of sophisticated databases. You were 
able to store information on several different levels. On one hand, 
you were able to store information about the seminars; the Buder 
database contained information about the seminars such as the 
location, date, and sponsor. Even so, you were able to store and 
access information one level deeper. Information about the regis- 
trants, such as their name, their registration ID, and the date they 
registered, was stored in the Butler database. With the proper 
amount of programming and resources, you can embed several 
layers of information in your databases. 

Guide to Using Tango 

Tango is comprised of two elements: the Tango CGI and the 
Tango Editor. These two applications arc the heart of the Tango 
interface. We’ll learn how to use these two applications to build a 
Web-based interfece to your databases. 

The Tango CGI 

The Tango CGI is a stand-alone multipurpose CGI application that 
works between your database and your WebSTAR server. The Tan- 
go CGI processes queries embedded in HTML documents created 
by the Tango Editor. Written in C++, the Tango CGI is asynchro- 
nous, multithreaded, and PowerPC native. 

The Tango CGI works like any other CGI application that we con- 
structed in Chapter 7. However, it’s specialized to work with query 
documents constructed with the Tango editor. It’s called in one of 
two ways. The conventional method is to embed the CGI call in a 
URL like this: 

http: //ray. web. server/Tango/example/ 
query_doc?f unction=f orra 

The other method works exclusively with WebSTAR You can asso- 
ciate the Tango CGI with a user-defined action in WebSTAR Ad- 
min. In this way, you can specify a certain file suffix with a call to 
the Tango CGI. 
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NOTE 






You'll note from the previous examples that when you run a Tango 
query, the Tango CGI stays active even after the search. This saves 
time, as the tango.acgi application will then not need to be re- 
launched each time a query is made. You can close the application 
by selecting it from the application menu and quitting it like any 
other application. 



NOTE 






See Chapter 4, "Macintosh HTTP Servers, " for more information 
on WebSTAR's user-defined actions. 



The Tango Editor 

Using a tool like ButlerLink/AppleScript, you can build a custom- 
ized CGI script to access your Butler databases. However, a tool 
like the Tango Editor offers you a graphical means of developing 
query documents that are interpreted by the Tango CGI. As men- 
tioned previously, the Tango Editor works with several types of 
databases, whereas ButlerLink/AppleScript limits you to develop- 
ing only AppleScript CGIs. The Tango Editor lets you do three 
main tasks: 

□ Generate query documents. These documents are config- 
ured within the Tango Editor so as to present an HTML page 
that prompts the user for search criteria. 

□ Generate record list documents. These documents display 
the results of a Tango search. 

□ Generate record detail documents. These documents dis- 
play detailed information about records returned as a result of 
search queries. 

These documents are created by the Tango Editor and are not 
strictly HTML. Instead, they are interpreted by the Tango CGI, 
which develops HTML and displays the results of the database que- 
ries via WebSTAK Let’s look at these individual tasks. 
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The Query Builder 

Launch the Tango Editor and open the document Lesson 1 Builder 
in the lesson_l folder. You should see a series of windows, as shown 
in Figure 8.12. Note that there are two windows displayed. Click 
on the maintable entry in the Database window; you should see the 
list of columns appear in the bottom window. The opposite win- 
dow is the main Tango Editor window. To compile a query docu- 
ment, you drag die desired columns from the Database window 
over to the Search Columns window. 



: letson 1 builder i 



Starch CokMnnr: 
m«inl4bte4. .sffiMtion [lr| 
mafnt»bW. iwfMhrfr 




)] AHgn FWtds j [H»»d*r...l [ Footer ] ' 

®Uwftae*d-v«thfont j [ Button j 

OUi»t«bWfo fm*tUn9 j [ No Rwutt« HTML... [ 



Figure 8.12 The Tan^fo Editor Search Query Builder offers a 
£(raphical interface for developing HTML paries that initiate data- 
base searches. 



In the Tango Editor window, you can then click on the various 
HTML options that you would like to include in your search query 
page. By selecdng each column in die Search Columns window, 
you can specify the column title. You also can specify the manner in 
which the search criteria will be evaluated. The opdons in this win- 
dow also tell the Tango CGI how to format the HTML fields in 
which the user enters the search criteria. You also can specify the 
page headers, footers, search button tides, and even the HTML 
text, telling the user diat no results were found. You can even speci- 
fy whether the search page is formulated using a fixed-width font or 
as an HTML table. Remember that on the HTML search page, 
each database column can be presented differendy; simply reformat 
each column with different options within the Tango Editor. 
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Specifying the Search Results Page 

While in the Tango Editor, click on the top button entided Record 
List. The window should now appear, as shown in Figure 8.13. 
Once again, you can specify which columns from the database table 
are displayed in your search page. You also can specify how the 
informadon is formatted on the page. You can specify how many 
matches from the search should be returned. Once again, you can 
determine the HTML page headers and footers for the results page. 



i lesson I builder ^ 



Cchmnr: 



OrdfrBff: 



R»ow^Lfst I RMordDtUfl 




[ — CciefnmQp'thns: — 

Q Column Contains HTML 
(SUnktoRocordDoUil 
rvW Tldr; | VohicW Wam» 



® I <0 I Maximum 



Ostand«'d 

(^TabW 

lH»ad»r...llFoot»r...| 



1 Options... I 



Figure 8.1 3 Using the Tan^o Editor, you can specify the format of 
the HTML pa^e that displays your search results. 



Giving More Detail on the Search Results 

Given the results page that you’ve just specified, you may want to 
link in more information on the individual records returned on the 
results page. This is accomplished within die Tango Editor by click- 
ing on the Record Detail button at the top of the window. You 
should see a window similar to diat displayed in Figure 8.14. 
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lesion 1 builder 

I S»Tch y Rtc<rd LW y R»oTd D*Ufl ] 



OispUf/C^hmns: r- CfkimnOfpf^ 



maIntibW. .jxjf*ctur#r 


A 


1 7vpr; Char (20) r-"- v i i 




flrW rHHt: 1 VohtoW Typo ’ 


mjkttsb’rf colour 

m« hor Mpovor 


r-i * ^ ^ 

U Column Contains HT?*1 ^ ^ ' 

Q Allow Updato ^ ^ f 

Text 'r II Options jl' 


□ Allow OeWto of i mmi 

Fcrmtt: 
g| Align Fields 
® Us» fbced-width font 
1 O formatting 


*1. - ^ 

[Head*r...l[Foot»r.>] 
[ Button TftWs... 1 
( DeWtf Response ..~1 
( Update Response... f 



Figure 8.14 Not only can you return results from a search query^ 
but you also can display more information on each result. 



In the automobile classifieds demo (see the “Automobile classifieds 
example”), we noticed that once you received a series of cars that 
matched your search criteria, you were able to click on the individ- 
ual entries and see an entire Web page devoted to that entry. This is 
what the Record Detail portion of the Tango Editor accomplishes. 

Similar to the other Tango Editor environments, you can specify 
the way in which the different database records are displayed. This 
is a useful tool for giving your users more information about the 
database search results. 

Query Documents 

When you’ve finished your format specifications for your query, 
results, and resulting details, click on the File menu and select Gen- 
erate Query Document. You’ll be presented with a dialog box ask- 
ing you where you’d like to store die query document. Enter a 
location that is accessible through a URL directed at your Web- 
STAR server. For example, you may want to locate your Tango 
query documents in a folder just inside of the WebSTAR folder. 

In any case, you’ll be presented with the actual URL in a dialog 
box similar to that in Figure 8.15. You can close the dialog box or 
copy the URL for pasting into a Web page. Remember that when 
inidating a database search, you don’t use conventional URLs that 
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point to HTML documents. Instead, the Tango CGI is launched 
and then interprets the query document named in the URL. 



Th* doouiMfit has and can b* caTM vflh i*i« follovlng URL: 



jhttp://<yoor wfb sarvar addrass>/Tan 9 o/Tan 90 >ao 9 ti/<path to quary 
|dooumant>/UssonS(201 SS20quary ?Ajnction*form 

t Cow URL and Closa j 



Figure 8.1 5 When£ienemtiri 0 a query document, the Tan^fo Edi- 
tor will display that documents URL for you to incorporate in an 
HTML pa£e. 



If you want even more control over the database query, you can 
edit the query document direcdy with the Tango Editor. Simply 
open a query document with the Editor and you’ll see a set of win- 
dows similar to Figure 8.16. These windows depict the execution 
flow of your database search using graphical icons; tlie Action win- 
dow details the types of operations you can develop in your search. 
By adding icons or modifying those in the query document win- 
dow, you can customize the execution of your database search. 



I 


lesson 1 query 




Aetfons 




DtfMKdaU sourct: Ltsson 1 ' [ Choost ] 




Starch 




3 BranohToForm 






^ InstH 




21 BranehToStarch 






^Updatt 




S BranchToDttail 






9 Ottett 




^ tnvatNfunetton © 






^ Custom SQL 




• stopi 






^ AppW EvMt 




@Form Q 






@ NoOptratioo 




#Stop2 










Starch ©0 






• stop 1 


• stops 








1 


O^Oetan B 






© Hj B = 31 




• stop4 


K 







1 



Figure 8.16 The actions in the query document are executed in 
order, as shown. Tou can edit and even redirect the order of execu- 
tion by modification with the Action icons. 
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As mentioned in the beginning of this section, there are other 
databases available for the MacOS. Many tools exist that allow 
you to display the contents of these database on your Web pages. 
There are several CGI applications that offer forms-driven access to 
FileMaker Pro database files. The most popular FileMaker Pro CGI 
is ROFM CGI (formerly known as FMPro CGI) available at http:// 
rowen.astro.washington.edu/. 

Document Text Searches 

Anotlier powerful tool that you will want to make available on your 
Intranet is document searches. Think about it — most of the work 
done by your organization in the last few years is stored somewhere 
in electronic form. All the memos, reports, and technical papers 
exist scattered around on various desktop computers. You’re forev- 
er locked out of the files on the computer belonging to the guy 
down the hall... simply because you don’t know what’s on his com- 
puter! 

Imagine if all the text and word-processing files developed by your 
organization were now located in a central location or at least on a 
set of computers with network access. You would be able to search 
tliese holdings for relevant files. You could compile an online orga- 
nizational library accessible not through file cabinets and librarians, 
but through your Intranet Web services. 

Let’s look at some of your options. 

TR-WWW (http://www.monash.edu.au/informatics/ 
tr-www.html) is a Web-based version of the Total Research docu- 
ment search application designed to work with the shareware 
HTTP server, MacHTTP. TR-WWW will also work witli 
WebSTAR. Specifically, TR-WWW is a shareware text search and 
retrieval engine that you can use to search through text files for 
occurrences of text strings. 

TR-WWW offers several advantages, the most beneficial of which is 
that your files do not need to be indexed. Many search engines 
require file indexing to speed up the search process. This entails 
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setting up the files, or file descriptions, into a database or some 
structured file system, and running the search through that file 
system. As a result, you can just dump your files into a single direc- 
tory and have TR-WWW scan them. 

One disadvantage is that TR-WWW works only with text files. 
Therefore, your mounds of MS Word and WordPerfect documents 
are inaccessible to a TR-WWW search. Many people get aroimd 
this short-coming by converting these types of documents to 
ASCII text, which requires some additional labor. 

Installing and Configuring TR-WWW 

TR-WWW is distributed as a fat binary, so it will take advantage of 
your Power Mac’s faster processor. TR-WWW is very simple to set 
up. There are three elements to TR-WWW. 

□ tr-www.cgi. The actual search engine that works with 
MacHTTP. Like Tango, discussed in the “Introduction to 
Tango” section, it’s a pre-written CGI application. 

□ tr-www.prompt. The file loaded into your Web browser used 
to initiate text searches. 

□ tr-www.config. A simple configuration text file. 

Move all of these files into your Web server folder. You’ll also nest a 
folder entitled Docs in this folder. This Docs folder will contain all 
of the files that you want to search. As you accumulate files that 
you want to search, just load them into this folder. For now, just 
load the sample Docs folder from the TR-WWW distribution. It 
contains several sample text files. 

Once all the elements of TR-WWW have been moved into the Web 
Server folder, open a Web browser and insert the following string: 

http: //<your server>/tr-www.cgi 

A search form page will return in the browser window. Scroll down 
and you should see the page as formatted in Figure 8.17. The page 
returned by the CGI is derived from the HTML code found in the 
tr-www.prompt file. You can customize the response returned by 
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the tr-www.cgi by editing this file. To fiilly customize the response, 
you’ll have to grab a Mac resource editor, such as RcsEdit, and edit 
the STR resources in the tr-www.cgi. 



_ Netscape: tr-u;umi.cgl _ _ « | 


iForvjrdj Mom» j ' lm*9M 1 Opio ] Prlnl j FW 1 Slop j JJ 


^!i 

■ 


Loc*tloi»: jh Up //cyt-tejt/tr-wv.cgi 


document (many E undneds of K) - please think about this before downloading 
laige files (the context find is better for browsing. 

TR-WWW Search form 

Please type in a search term, select the appropriate options, and then click on 
Search to run the search 

Enter search word| i hotton [ Search ] 

Choose t^ of search to perform: 

Context Fmd ® Relevance Find O 

For Context finds, choose the number of hits to xetxim |40 (range 10 to 200). 

Select the variant Boolean relationship between the first and remaining words: 

r~oR 1 

For NEAR and NOTNEAR type searches, set the nearness |40 (suggested range 10 
to 200). 

Please choose a document set from the list to search: 

1 AU_Digests | 


m 









Figure 8.1 7 TR-WWW offers several options to use in searchinpi 
for documents. 



Note that users can specify several search options. First, you can 
specify whether the search is a context or a relevance search. A con- 
text search is one where the results depend on a relevance rank- 
ing — a file with a high relevance ranking usually contains several 
occurrences of the search string. A keyword search returns lines of 
text containing your search strings; clicking on the hyperlinked text 
returns the entire document. 

You also can specify the maximum number of correct matches to 
return in the search. If your Docs folder contains many documents, 
this parameter will restrict the number of correct matches to your 
search. 
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TR-WWW gives you several ways to configure your search if your 
query contains multiple strings. Click on the popup menu to dis- 
play the different Boolean operators. The fimction of these opera- 
tors is described below: 

OR Returns logical union of your query strings. 

AND Returns logical intersection of your query strings. 

PHRASE Returns occurrences of your query strings where they 
appear side-by-side as in ‘Power Macintosh’ or ‘Micro- 
soft Word.’ 

NEAR Returns occurrences of your search strings when they 
appear near one another. This nearness parameter is set 
at the bottom of the form. 

NOTNEAR Opposite of NEAR Search strings cannot appear with 
in a certain number of words. 

Below the popup menu, you’ll see that you can set the nearness 
parameter. This parameter establishes the number of words that can 
separate multiple strings within a NEAR or NOTNEAR search. 

Finally, you’ll see that TR-WWW has assembled the contents of the 
Docs folder in a popup menu. This allows you to restrict the 
searches to certain files or embedded folders. 

Clicking on the Search button at the top of the page executes the 
search and returns results similar to that foimd in Figure 8.18. The 
result in the figure corresponds to a context search; note that the 
actual lines of text appear in the browser window with the search 
strings hypcrlinked to the actual document. Clicking one of the 
hyperlinks brings up the actual document, as shown in Figure 8.19. 
You can then jump down to the occurrence of the string or retrieve 
the file in its entirety. 
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Netscape; tr-iumm.cgl 



Back iForw’d] 



Location: |http://c9i-te$t/tr-wv.c9< 



Vhat*<H»v? I Vhat*sCee1?i Handbook | WotSoarch | Not Dirootory | Softyart 



Search Results: 



Select a line to retrieve further context Information. 



, 2 Jun 1994 09:27:33 -0600 Fro»: c ahcttowfl oao. hsc. nth. ta>o. edn (Chuck Shott 
shottaB8oac.Kso.uth. t»o. edu fchuok Shotton^ To: machttp_talldoa^.hso.uth. t 
Chuck Shottcn \ Assistant Dir actor, Acadanic C 
a Cantar Xottstcn \ vagatablas 1 1 1 ” cshottan floao.hso.uth. t»o. adu <713} 794-56 
string. le. — basad on chuck Shottcn * s "saarch_soript.ogi" ApplaScrip 



Document: Pena. 



Figure 8.18 A TR-WWW context search returns the actual lines 
of text in which your search strings appear. 




Netscape; MacHTTP-DlgestS-.28-73.tHt.2020, 

Back |F<>r»ard( Homa | Ratead | knays | Optn | Print | Find | Stop | 
Looatioo; jhttp;//o^tast/tr-vvy cg17_j9*t,/C>ocs/AnJ>igasis/MaoHTTP_I)i9«ts-2e-7iT 
Vhat's Now? I Vhat's Coot?! Handbook I Nat Saaroh 1 Nat Mractory I Softwara 



Matched text 



The following document extract has been retximed as a result of a context search. 

To go to the actual position of the match within this document, click here . To 
retrieve the entire nle in native format, click here . 



MacHTTP_Digests_28-73.txt 



Data. Thu, 2 Jun 1994 09:27:33 -0600 
Frca: oshottoB8oao.hsc.uth tao. odu (Chuck Shotton) 
To: Mchttp_taU4oao3.hso.uth. tao. adu 
Subject: Da: AOX 3.S aith KacKTTP 1.3 aoosr 



>Xallol 



>l have the enportunity to introduce Mosaic and MaOtTTP to 
>soM people that don' t gat out of their lab space vary often. 

> 

>The only problea X see is that all their Macs are running 
>AUX 3.x or 3.0.x (or sone reoant flavor) Is there anythii^ 

>that I should be aorriad about? Any problans? 

1 vxsh X could say with certainty. However, X have heard nixed reports 



iotl Docurr>»nt:t>oft» 



Figure 8.1 9 The final result — you can view the file containing 
your search string or you can jump down to the search string itself. 
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You can configure many of the search options that we’ve discussed 
so far. The search configurations are stored in the tr-www.config 
file. You’ll find the default values for your TR-WWW searches con- 
tained in this file. The options listed in this file are well-documented 
and are an easy means of customizing a series of searches. 

AppleSearch 

AppleSearch (http:/ /product.info.apple.com/productinfo/ 
datasheets/ss/applesearch.html) is a search engine developed by 
Apple Computer. As a commercial software offering, it offers more 
functionality than that presented by TR-WWW. AppleSearch will 
search for files anywhere on a particular volume and will also search 
for files on computers accessible through a local network or on the 
Internet. 

AppleSearch can search for documents on both Mac and Windows 
PCs. Furthermore, the application comes with a variety of filters so 
that it can search files of varying types including Microsoft Word, 
MacWrite, Microsoft Excel, WordPerfect, and many others. This is 
an important feature, as much of the work produced by your Intra- 
net users is in files of these types. You are not limited to strictly 
text-only file searches when using AppleSearch. 

Apple also produces the AppleSearch.cgi application. Like TR- 
WWW, AppleSearch.cgi (http://kamaaina.apple.com/) is an appli- 
cation that acts as an interface between AppleSearch and your 
HTTP server. As a result, you can integrate AppleSearch into your 
Web services using the AppleSearch.cgi. 



MacSite Searcher 

Blue World Communications’ MacSite Searcher (http:// 
www.blueworld.com/macsite/searcher/) is a competing commer- 
cial application to the AppleSearch/AppleSearch.cgi search tools. 
MacSite Searcher is based on custom Frontier scripts and FileMaker 
Pro. The application periodically indexes text files stored in a par- 
ticular folder into a FileMaker Pro database. The MacSite Search 
Frontier scripts then interact with FileMaker Pro to search the files 
for particular strings in the database. 
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Summary 

One of the most useful features you can offer your Intranet users is 
the capability to work with databases and search for documents. 
We’ve covered how you can accomplish these tasks using simple-to- 
use Web-based interfaces. Much of the difficulty involved with de- 
veloping database applications and customized search applications is 
obviated through the use of applications like EveryWare’s Tango as 
well as the TR-WWW document search tools. Working these tools 
into your Intranet will provide a potent and flexible capability to 
your users. 

In Chapter 9, “Beyond HTML,” we’ll talk about some of the ways 
that you can supplement your Intranet Web pages with new for- 
mats and techniques beyond the conventional HTML and graphics 
files. We’ll talk about PDF, RealAudio, VRML, Java, and other hot 
topics. Feel fi-ee to jump around in this book. Some chapters relat- 
ed to this current one include: 

□ Chapter 4, “Macintosh HTTP Servers,” to learn about the 
different software you can use to set up World Wide Web 
services on your Mac. 

□ Chapter 7, “Writing CGI Scripts,” to learn about writing 
scripts for your Web site. These scripts allow you to process 
data from HTML forms and return customized Web pages. 

□ Appendix C, “Perfecting HTML,” to learn about some ad- 
vanced HTML programming features as well as how to use 
some popular HTML editors, including Adobe PageMill and 
BBEdit. 
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Beyond HTML 

In an environment that changes as rapidly as the World Wide Web, 
it’s difficult to make predictions as to what lies in the future. This 
section, however, discusses several emerging technologies that will 
make their presence known on the Web. You’ll need to keep 
abreast of these new areas, because these technologies can yield 
new and useful services to your users. For each topic discussed, 
you’ll see how it could be incorporated into your Intranet. 



PDF 



The Portable Document Format (PDF) is a document format pro- 
posed by Adobe Systems, Inc. Much like HTML, it’s seen as an 
alternative file format to HTML. This non-ASCII format describes 
a cross-platform means of viewing documents. The Adobe Acrobat 
Pro application lets you construct and add features to PDF docu- 
ments, whereas the Adobe Exchange application enables you to 
print your documents fi“om an assortment of word-processing and 
page-layout applications. Finally, Adobe has offered the Adobe 
Acrobat Reader as a fi-eeware PDF viewer. This enables users from 
all major operating systems to view and print PDF files. An example 
of a PDF file as viewed widi the Adobe Acrobat Reader is given in 
Figure 9.1. r 




Adobe also is the company that brought you the PostScript lan- 
guage. PostScript is a graphical description language that is used 
by printers and some display devices to express graphics. Adobe 
also developed Acrobat Distiller, which is a means of converting 
PostScript documents to PDF. 
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Figure 9.1 The Portable Document Format allows more sophisti- 
cated formatting than does HTML. 



PDF allows several text-processing options not found in HTML, 
such as multiple columns, text flow around graphics, color, and 
font specification. Furthermore, Acrobat users can install annota- 
tions in the form of scrollable text boxes for workgroup applica- 
tions. PDF files also can sport hyperlinks within the document; 
using the WebLink Acrobat plug-in, you can click and launch 
URLs within the PDF document. 




Grab a free copy of Adobe Acrobat Reader along with the Amber 
and WebLink plug-ins at http://www.adobe.com. 



Because of the t>pcsetting freedom allowed by the format, PDF 
files are frequently published on the Web using Acrobat with the 
Reader as a helper application. PDF files are even viewable with 
Navigator or Internet Explorer using the Amber plug-in, described 
in the section “Amber” at the end of this chapter. You may want to 
serve PDF files for documents that cannot be accurately rendered 
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in HTML. An example of such a case is a newsletter, company bro- 
chure, or any document that uses formatting not available in 
HTML. 

RealAudio 

RealAudio, by Progressive Networks, is a means of broadcasting 
high-quality audio transmissions over the Internet. Although it 
seems like an esoteric use of the Internet, RealAudio sites have 
proven to be very popular. Applications include music concerts, 
sports and news broadcasts, and real-time conferencing. RealAudio 
2.0, which was introduced in early 1996, can produce FM-quality 
audio, even over a 28.8 modem connection; AM-quality sound can 
be transferred to a computer with a 14.4 modem connection. 

RealAudio employs a client-server architecture and sophisticated 
compression techniques to broadcast live and archived audio data 
to multimedia computers with Internet connections. The following 
are the three major components of the RealAudio system: 

□ RealAudio Server. The server delivers live and archived audio 
over TCP/IP networks to multimedia computers. The 
Macintosh port of the RealAudio server works with the 
MacHTTP and WebSTAR servers; a Power Mac is required. 

□ RealAudio Encoder. This is required to compress audio files 
into the RealAudio file format. The Encoder has the capability 
of compressing audio files direedy, or it can compress live 
audio feeds for streams fed into the RealAudio server. 

□ RealAudio Player. You need this freeware utility to listen to 
real-time audio from a RealAudio server. 



NOTE 




Check out information about the RealAudio system at http:// 
www.realaudio.eom/products/ra2.0/. You'll be able to download 
free copies of the RealAudio player. 
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The RealAudio server publishes the audio data in streams. The 
number of streams handled by the server is dictated by the speed of 
its connection to the Internet. These streams can be multiplied by a 
splitter across the Internet to reduce bandwidth requirements on 
the RealAudio server. 

As far as the Web server is concerned, it doesn’t know that it’s 
fielding a request for a RealAudio transmission. A hypothetical 
RealAudio request over the Web probably goes like this: 

Browser: “Hey, my user wants to look at this URL. It has 
a funny suffix, ra, I wonder what that means? I’ll send it up to 
the server.” 

Server: “Oh yeah, that thing! I don’t even know what 
RealAudio is, but this link has some information here. I’ll 
pass it on to its helper application. Now leave me alone.” 

Browser: (to RealAudio Player) “Here, this is for you.” 

RealAudio Player: “Oh boy! A request for a RcaL\udio 
stream. How exciting! Let me contact the RealAudio server 
mentioned in the link and tell it to play this particular stream 
for this particular time. Man, this is great! I just need to tell 
the RealAudio player something about the computer on 
which I live.” 

RealAudio Server: “I’m there, dude. Let me start up this 
stream but before I do, let me see how fiist your connection 
is. 28.8? Great, here’s the stream he wants. It’s a live feed, so 
I need to start compressing the data as it leaves my box. Here 
it goes.” 

RealAudio Player: “Okay, here it comes. I know I have the 
Mac SoundManager extension here onboard with me so it’ll 
figure out how to let the user hear this. Man, I love this job!” 

You may want to serve RealAudio feeds, or you may want to serve 
archived sound in RealAudio format. Whichever you choose, you 
will need to configure your server with enough network bandwidth 
and disk space to cover your load. Progressive Networks states that 
an hour-long FM-quality transmission requires 8 MB of disk space. 




Chapter 9 Beyond HTML 



267 



One possible application of RealAudio is to use your server as a 
means of broadcasting real-time conferences; unless you plan to 
couple that with real-time video conferencing, it’s hard to see 
RealAudio’s advantage over conventional teleconferencing. The 
FM-quality sound is more valuable for music transmission. Even so, 
the RealAudio service is an emerging technology that is a really 
interesting solution in search of a need that you might have. 



vmi 



The Virtual Reality Modeling Language (VRML — rhymes with 
thermal) is a draft specification for a language that can publish 
three-dimensional data over the Internet. As HTML enables you to 
construct a two-dimensional publishing metaphor for graphics and 
text, VRML is a separate language designed to extend the meta- 
phor to a third dimension. \^th Netscape and HTML, you mean- 
der across a page and click on links and graphics as you see fit; a 
VRML browser allows a hypothetical third-dimension to be tra- 
versed as well. Instead of two-dimensional imagemaps, VRML 
browsers have hallways that can be traversed much like you would 
in a virtual reality simulation. Information can be displayed from a 
variety of three-dimensional perspectives instead of the rigid display 
defined by your two-dimensional Web browser. 

Whereas you jump from page to page using HTML, VRML users 
jump between “worlds.” These worlds can be configured with vari- 
ous VRML editors. Loading a world over the Internet requires not 
much more time than a large graphic docs using HTML. It’s possi- 
ble that three-dimensional graphics will become more prevalent 
in the Mac environment with the recent release of QuickDraw 
3D, a new 3D-rendcring technology (available at http:// 
qtvr.quicktime.apple.com/). Apple has released QuickDraw 3D for 
\^findows as well. 

Programming in VRML is analogous to programming in HTML. 
The three-dimensional interfiice leads to new possibilities in infor- 
mation publishing. If you have ever played DOOM or Marathon, 
you’ve seen some of the applications of three-dimensional graphics 
imder the MacOS. As you explore other VRML worlds, you can 
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think of ways that you can use the three-dimensional metaphor to 
present information to your users. Examples of this metaphor can 
include a virtual reality implementation of a library; users can navi- 
gate through virtual stacks to browse some of the library selections. 

Several VRML editors and browsers are available for the MacOS. 
Virtus Corporation sells Walkthrough Pro, a VRML editor, and 
Voyager, a VRML browser. Strata Corporation sells StudioPro 
Blitz, which supports QuickDraw 3D. Both Voyager and StudioPro 
Blitz are VRML browsers in their own right, but can be configured 
as Netscape VRML helper applications. 



Java 



The computer industry does a poor job of predicting the next big 
thing. When you think of events that have taken the computing 
industry by storm, such as the Macintosh, the Internet, and the 
Web, they usually have come unheralded and by surprise. In con- 
trast, things that the industry heralds as significant never really live 
up to their promise; examples of this are the Ada computing lan- 
guage, Apple’s Newton, Microsoft Bob, and Windows 95. Java may 
be the first event to buck this conventional wisdom. Despite all the 
hype it has received in recent months, many experts predict that 
Java will revolutionize not only the Web, but the computing para- 
digm as we know it. 

Caffeinating the Web 

Java was developed at Sun Microsystems, as a possible means for 
the Unix workstation manufecturer to venture into consumer elec- 
tronics software. As originally conceived, Java would operate such 
devices as light svidtches, microwave ovens, television box tops, and 
other mundane devices. The intention was to build a language that 
was as efficient as C++ but much more reliable. Sun’s consumer 
electronics initiative failed at the same time that the Mosaic browser 
was introduced. All of a sudden. Sun foimd another use for Java. 
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The idea behind Java is simple. For an application to run, it must 
first be translated from a programming language such as FOR- 
TRAN or C++ into a computer’s native machine code. This process 
is time-consuming and needs only to be done once. As a result, 
applications are compiled and delivered to the desktop in some 
manner whether it’s by hard drive, CD-ROM, or network. The 
problem with installing an application built from compiled code is 
that it’s a one-time operation; to develop a robust application, you 
have to pile everything but the kitchen sink into the program. Any- 
one who has waded through a 30+ disk installation of Microsoft 
Office can attest to this. Furthermore, different compilations have 
to be created to run on a variety of computing platforms, often 
with a nontrivial amount of rewriting. 

Java gets around this by using an interpreted approach to code- 
building. Interpreted code operates much slower than compiled 
code. However, Java applications, or applets, are much smaller than 
conventional applications. These Java applets are sent down the 
Internet to do small specialized tasks. A commonly cited example 
of this is a payroll time sheet built into the Web. You can take a 
payroll form and build it with HTML forms commands. To inter- 
actively calculate billable hours and tally personal leave like a 
spreadsheet, you would have to write a cumbersome CGI script 
that would exchange data with the HTTP server, do the calcula- 
tions and reload the entire page with the updated results. In con- 
trast, a Java applet would be built into the page just like ordinary 
HTML. A Java-aware browser would run the applet and perform 
the necessary spreadsheet-like calculations on the client computer. 
Other Java applications include real-time stock ticker Web pages, 
animation, Web pages with rudimentary word-processing capability, 
and many others. 

Using Java in your applications improves your server performance. 
Whereas CGI scripts place an extra load on your server (some In- 
ternet Service Providers forbid you from using developing CGI 
scripts for this very reason), Java applets run on the client 
computer. Despite the fact that Java applets run on your browsing 
computer, these applets have a limited capability to affect the user’s 
machine, making Java virtually virus-proof 
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Netscape, Java, and Hotlava 

Netscape has worked closely with Sun to obtain support for Java 
within the Netscape Navigator browser. Alternatively, Sun also is 
developing a new browser known as Hot Java. In contrast to 
Netscape, Hotjava will be intertwined with Java to produce a more 
interactive browser. If a conventional browser encounters an image 
file format it does not recognize, for example, it throws the prob- 
lem back at the user. Hotjava, on the other hand, will not only 
download the image, but also the specification, written in Java, for 
handling the image file type. Granted, this will occur in Java- 
capable browsers but it’s likely that Hotjava will always be a more 
robust and flashier browser for reading and downloading Java ap- 
plets. Hotjava requires less dependency on helper applications and 
plug-ins than do conventional browsers. 

A $500 Java Box? 

Many experts predict that Java may mean the end of Microsoft’s 
desktop hegemony. By sending cheap applets down your browser, it 
would no longer be necessary for you to have a word-processing 
application that takes up 30 MB of hard drive space. A word- 
processing applet would come down to your computer and evapo- 
rate as soon as you finished using it. Need a spell checker? Summon 
an appropriate applet and then send it packing when you’re finished 
with it. 

With a fast enough network connection, Java applets would obviate 
the need for expensive desktop applications. In feet, some experts 
say that operating systems would become obsolete. Your future 
computer may be a $500 box that does little more than connect 
you to a Java server through a very fast network. 

As you can imagine, Microsoft disagrees with this vision of the fu- 
ture. They responded to the Java threat with a similar language 
known as Visual Basic. Visual Basic also contains a programming 
language and an interpreter similar to C++. Surprisingly, Microsoft 
has acknowledged Java’s popularity by announcing support for Java 
in its new Web server and browser software. 
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Java and You 

Of all the emerging technologies mentioned in this section, Java is 
probably going to most affect you as a WebMaster. It may actually 
turn out to be one of the lone heralded revolutions in computing. 
The Java/Hot Java paradigm is one that you should be looking to 
adopt in your server. 

JavaScript 

JavaScript is similar to Java, but without Java’s more sophisticated 
C-like type checking and static typing. Furthermore, JavaScript 
isn’t really built for graphics — it’s not multithreaded, and it can’t be 
extended to create new data types like Java. JavaScript is supported 
by Netscape Navigator. Inasmuch as Java may have applications 
beyond Navigator, JavaScript is designed to work inside an HTML 
page as a run-time configurable option. JavaScript actually is em- 
bedded into the HTML code, whereas Java applets are compiled 
and accessed by the server and are distinct from the pages that call 
them. 




For more information on pfograrnmlng vvit^ see 

Jav^(^iptforJ\A^cintoshbyMa^^ ^ 



Whereas Java is descended from C++ and other languages that 
strongly support object-oriented design, JavaScript belongs to the 
same class of smaller, dynamically typed scripting languages such as 
AppleScript, HyperTalk, and dBASE. These types of scripting lan- 
guages offer more appeal to less-experienced programmers who 
appreciate the more comprehensible syntax, specialized features, 
and the freedom fi-om having to deal with object classes and 
inheritance. 



JavaScript also supports event handlers. For example, you would be 
able to execute a script or function by having the user click on an 
area of the browser window or even move the mouse to that area. 
Because JavaScript is an interpreted language, complicated tasks 
run more slowly and are better executed using Java applets. 
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However, JavaScript is ideal for simple tasks that extend beyond the 
capabilities of your HTML and would normally require sophisticat- 
ed CGI scripts. 

Netscape Plug-Ins 

The Netscape plug-in architecture enables third-party developers to 
create modules that extend the functionality of the Navigator 
browser. Within the Navigator context, the plug-in allows the 
browser to display a file for which there is no native MIME defini- 
tion. A plug-in registers its MIME- type definitions when the Navi- 
gator is launched; other than disk space, the plug-ins consume little 
or no system or application resources. 




The concept of plug-in modules is not new to the software indus- 
try. Adobe Photoshop has plug-in modules to enable users to in- 
stall different types of graphics filters and effects. 



Navigator plug-ins are used to extend the functionality of the 
browser. For example, when Navigator is sent a GIF file from a 
Web server, it displays the GIF image within the browser. The same 
can be said for JPEG images. The code that tells Navigator how to 
display these images is resident within the application. All a plug-in 
does is tell Navigator how to display files of certain MIME types. 
Essentially, the plug-in creates a partition or subwindow within the 
browser window to display a file of a certain MIME type. 



Netscape distributes the plug-in Application Programming Inter- 
face (API) free-of-charge; as a result. Navigator plug-ins started to 
appear shortly after version 2.0 of the browser was released. Given 
the open plug-in architecture, there are virtually no limits to the 
types of files that you can display within your browser window. As 
an Intranet administrator, you should be cognizant of the types of 
files that members of your organization may want to view within 
Navigator. For example, engineers doing computer-aided design 
(CAD) work on high-end workstations may desire to keep a data- 
base of CAD drawings accessible through Web pages. Using 
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pre-Netscape 2.0 technology, you could develop a Web front end 
to the database and have the engineers download the drawings to 
their workstations or desktop computers. However, using the Navi- 
gator plug-in API, you could develop an online CAD drawing 
viewer; in this manner, users could access files from the database 
using a Web interface and view them within the browser window 
before downloading them into a CAD appUcation. At the rate that 
plug-in modules are being developed for Navigator, there’s a good 
chance that most of the file types you work with are represented in 
the Netscape plug-in index. 

Plug-In Architecture 

Plug-ins can have three types of operation: hidden, full-page, or 
embedded. A hidden plug-in, like the RealAudio plug-in, runs in 
the background, and the effects are not visible to the user. An ex- 
ample of a hidden plug-in would be a sound player that plays 
sounds in the background. Kfull-pci£fe plug-in fills the browser 
window with the downloaded file. An example of that would be a 
PDF or CAD drawing file that would be viewed and manipulated 
within the browser window. Finally, embedded plug-ins incorporate 
the downloaded file into the HTML code much like GIFs and 
JPEGs are displayed alongside text. In each case, the browser inter- 
face remains the same. Users can use the famihar Back and Forward 
keys and have access to bookmarks and link history. 

Several types of plug-ins have been made available to the Netscape 
user community. The plug-ins display popular file formats, but oth- 
er than time and money, there is nothing to prevent you from de- 
veloping plug-in modules that display more arcane file types than 
are actually relevant to your organization. 




A directory of current Netscape plug-ins is available at http:// 

home.netscape.eom/comprod/products/navigator/version_2.0/ 

plugins/index.html. 
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Shockwave 

One of the splashiest plug-ins to hit die Navigator user community 
is Shockwave. Shockwave for Director is a way to package and play 
Director movies over the Web. Macromedia Director enables you 
to construct animated multimedia presentations. Shockwave for 
Director actually consists of two applications: Afterburner, which is 
a means of compressing Director files for faster Web transit, and the 
Shockwave Netscape plug-in, which allows you to display Director 
files in a window inside a Navigator window. 

Shockwave can allow some degree of interaction with a Director 
file. Figure 9.2, for example, shows how a user within Netscape 
Navigator can interact with a Director file to play the venerable 
game of Tetris. In tliis manner, a number of applications can be 
developed for the Web. Another example is the use of courseware. 
Courses that currently reside on videotape can be transferred to 
Director files, compressed using Afterburner, and downloaded to a 
student’s computer using Navigator and the Shockivave plug-in. 
The user would be able to start, stop, pause, and repeat sections of 
the course simply by using built-in Director controls. 




Figure 9.2 A Tetris-like £fame can be set up inside Netscape using 
the Shockwave for Director plug-in module. 
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Macromedia also plans to develop a hypertext version of Shock- 
wave. In this manner, you will be able to link Web pages to certain 
areas of a Director file. Going back to the courseware example, a 
Director developer would be able to code certain parts of the pre- 
sentation with links. To get more information on a subject, a user 
can cUck on an area within the movie that is associated with a cer- 
tain URL. The movie pauses, and the link manifests itself within 
the Web browser. 



QuickTime 

By the time you read this, Apple will have developed a QuickTime 
plug-in that enables you to display QuickTime movies within a 
Netscape window. This plug-in is similar to Macromedia’s Shock- 
wave, except that QuickTime is a more prevalent movie format on 
the MacOS and even Windows platforms. This plug-in enables 
many of the same movie controls as do the rudimentary video 
players. 

Amber 

Amber is the code name for a PDF viewer plug-in module from 
Adobe. The PDF format is growing in popularity, mosdy because 
of the ubiquity of the cross-platform Adobe Acrobat Reader appli- 
cations. Using Amber, you can examine PDF files within Netscape. 
Documents viewed with the Amber plug-in will be interactive; 
clicking on a section of the document will bring up another page in 
the browser window. 



Popular Plug-In Modules 

As stated before, a plug-in can be developed to allow a file of al- 
most any type to be displayed within Netscape. VRML plug-ins are 
becoming popular; these modules enable you to access VRML 
worlds from within Netscape. There are also plug-ins that enable 
you to view Microsoft Word and Excel documents. Progressive 
Networks has a plug-in enabling you to listen to RealAudio streams 
from within your Web browser. There are also MacOS plug-ins that 
enable you to convert the contents of a browser window to speech. 
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The future will bring only more sophisticated plug-in modules that 
promise to extend the functionality of Netscape Navigator (and 
presumably other browsers) to levels we can hardly imagine today. 

Summary 

There’s more to the Web right now than just HTML, New capabil- 
ities are constantly developed for the Web browsers. This chapter 
discussed some of those new capabilities. 

This is the last chapter that discusses Web-based applications for 
your Intranet. The rest of the book looks at some of the Intranet 
services you can provide outside your Web service. Chapter 10, 
“FTP Services,” talks more about providing FTP services. If you 
want more information regarding the topics discussed here, see the 
following chapters: 

□ Chapter 4, “Macintosh HTTP Servers,” to learn how to set 
up HTTP servers on your Macintosh. 

□ Chapter 5, “Managing Your Intranet Web Services,” to obtain 
tips on efficient Web server management. These tips are rele- 
vant to your Internet Web services as well. 

□ Chapter 6, “Creating an Efficient Web Site,” to learn about 
ways that you can develop a Web site that is easy to browse. 
Once again, the topics discussed in this chapter are relevant to 
your Internet Web services. 

□ Chapter 7, “Writing CGI Scripts,” to learn about writing 
scripts for your Web site. These scripts enable you to process 
data from HTML forms and return customized Web pages. 

□ Chapter 13, “Intranet Server Security,” to learn how you can 
configure hardware to provide secure transactions within your 
Intranet and out to the Internet. 

□ Chapter 14, “Sample Intranet Applications,” to learn how you 
can apply some of the technology we’ve discussed in this 
book. 
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FTP Services 



At this point, you should have a thorough understanding of the 
Web and what is involved in running successful Web services on 
your Intranet. The latter portion of this book will deal with other 
protocols and issues of constructing a Mac-based Intranet. The 
second half discusses die File Transfer Protocol (FTP) and how you 
can implement an FTP server on your Mac. This section discusses 
how FTP can be a vital clement of your Intranet server. 

Fundamentally, your Intranet is designed to move information be- 
tween computers, whether those sites are down the hall or across 
the planet. With the Web, you employ HTTP as a mechanism for 
transferring data between a Web server and your Web browser; the 
Web browser interprets the data and displays the appropriate files 
in the browser window. A more direct means of transferring data 
between computers is through FTP. Unlike HTTP, its more glam- 
orous cousin, FTP has been around since the early days of the AR- 
PAnct. It was designed to transport large amounts of data between 
remote sites. 

Because the earliest users of FTP were computer scientists, pro- 
grams that use FTP were designed with nonintuitive interfaces. 
Several Macintosh FTP applications utilize a more graphical inter- 
face employing icons, menus, and drag-and-drop. It was not long 
after FTP clients were developed for the Macintosh that FTP server 
applications began to appear. This chapter discusses some of the 
issues related to setting up an FTP server on your Mac. These top- 
ics include the following: 

□ How FTP works 

□ Using NetPresenz as an FTP server 
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□ Using InterServer Publisher as an FTP server 

□ Organization of your FTP server 

What Is FTP? 

In the old days, when you had a few megabytes of data to transfer 
to a colleague across the country, you needed to make a physical 
copy of the data and deliver it through conventional means. This 
meant you had to ask your system administrator to copy the data to 
some storage medium, usually a magnetic tape, and then hand- 
carry it across campus or ship it through the regular mail. Internet 
users have become spoiled, as they now transfer files over the Inter- 
net and measure data transfer in thousands of bytes per second. 
Using FTP you can transfer large files between computers, regard- 
less of their geographical distance. 

FTP is a TCP/IP protocol much like Telnet. Whereas HTTP is a 
nimble protocol designed to transfer data using relatively short 
connection times, FTP can quickly transfer large amounts of data 
using lengthy connection times. With HTTP, a server responds to a 
browser request by sending the appropriate files and closing the 
connection as quickly as possible. In contrast, FTP users can 
browse the directories of an FTP server and transfer multiple files at 
their discretion. 

FTP has a use within your Intranet. You can set up a site that’s 
accessible to all your users. On this site, you can store software, 
documents, or other files useful to your users. Your Intranet FTP 
site can complement your Web services by making files available 
that are too large and cumbersome to be distributed by a Web 
server. 

FTP is a client-server protocol much like HTTP and Telnet. An 
FTP session is similar to a Telnet connection; FTP servers listen 
for FTP traffic on port 21. To log in to an FTP site, you need a 
user account and password. With adequate privileges, FTP users 
can download and upload files, create folders, view text files, and 
even delete files. The main difference between FTP and Telnet 
sessions is that you cannot execute processes inside an FTP session. 
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FTP supports data transfer in all file formats. You can download 
binary and text files witli equal ease. Not only can you serve Post- 
Script or ASCII text files, but also you can serve software applica- 
tions and operating system patches. Unlike HTTP, an FTP server 
does not need to know what type of file it’s serving — it just needs 
to know the desired file format. 

One weakness of using FTP is the lack of navigation aids. Cruising 
through FTP server directories is much like moving through a 
Unix or DOS directory system. Except for the file name, size, and 
creation dates, FTP does not transfer information about the file 
content or description. There is no easy way to change directories 
except through using die Unix/DOS-like cd command. 



NOTE ^ Some FTP administrators provide a file that describes the files 

w maintained in that directory. This file usually is called Readme or is 
given some name that puts it at the top of an alphabetical file 
listing. 

When running an FTP connection from a Unix computer, you can 
view text files, such as Readme files, using the little-known com- 
mand Get Readme -. Macintosh FTP clients usually incorporate 
this feature through a pulldown menu option. 



FTP Archives 

An FTP server is analogous to a Web server. Instead of serving 
HTML files and graphics, FTP servers can maintain vast quantities 
of files in a variety of formats. These servers, also known as FTP 
archives, can store text files, graphics, or even software applications; 
these machines usually transfer files to the clients, and only in spe- 
cial circumstances do they receive files from FTP users. The FTP 
client application, in contrast to a Web browser, does not display 
the downloaded files. The client may decrypt or decompress these 
files after they’ve been downloaded, but FTP does not utilize or 
interpret the file the way a Web client displays HTML or graphics 
images. 
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Your Intranet FTP site can be used as an archive similar to the way 
FTP sites are run on the Internet. Depending on the size of your 
Intranet, you’ll probably see less traffic than the major shareware 
archives, but you’ll be able to adopt much of the same adniinistra- 
dve techniques used by these archives. Later in this book, we’ll talk 
about how you can integrate your FTP and WWW services (see 
Chapter 14, “Sample Intranet Applications”). 

Anonymous FTP 

If your Intranet is small, you can just dole out individual accoimts 
to your users; they can access your FTP servers much like they 
would log in to a normal Telnet session. It might be impractical for 
FTP site administrators to distribute user accounts for the hundreds 
of users who try to regularly download files fi*om a particular site. 
For this reason, archive administrators enable anonymous FTP ac- 
cess so that users can visit the site and download files. Anonymous 
FTP users have restricted privileges and usually can do no more 
than navigate throughout the server directories and load files. File 
upload and deletion usually is not permitted. 

The convention for anonymous FTP accounts is for the administra- 
tor to create an account with the user name “anonymous.” Al- 
though passwords are not monitored by the server, users are 
obliged to enter their email address as a password. In one sense, 
anonymous FTP access provides a potential security hole for a serv- 
er. Any time you give users computer access to an area they don’t 
own, you run the risk that they could unintentionally, or intention- 
ally, access material that they shouldn’t be able to access. If your 
Intranet FTP site is accessible from the Internet, anonymous FTP 
exposes your site to possible aggressive hacking. Your best bet is to 
include innocuous public-access material on your anonymous FTP 
sites. We’ll talk more about the security measures at your disposal in 
Chapter 13, “Intranet Server Security.” 




On your Intranet you may want users to enter ffieirnamesvp^ ; 

numbers, or employee IDs as their passwords; in this way, yopl) f e ^ 
able to review the FTP logs and contact users when problems 
arise. 
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You can allow users to upload files to a specific directory. This di- 
rectory would have suitable privileges to allow users to write files, 
but not to delete or even to see files in the folder. This allows users 
to collaborate on documents and transfer the finished products to a 
common area where a manager or supervisor can access them. 

Remember not to use one of your real passwords as an anonymous 
FTP password. Unlike a Telnet session, a password from an anony- 
mous FTP user is reported to the server administrator, and is there- 
fore regularly seen by a human being. Some administrators use the 
anonymous password entries to maintain statistics on who accesses 
the site. 




Both email and FTP are used to transfer information between 
computers. Email systems enable you to attach files to your mes- 
sages. This is an easy way of sending documents to other users. So 
when should you use FTP and when should you use email to send 
files? The answer usually relates to the size of the files. FTP is 
geared toward sending large files over a network. Sending a 2 MB 
file to someone over email usually is an unwelcome surprise on 
the receiving end. On the other hand, users can always FTP a file 
to a common site and notify the recipient by email that a large file 
is waiting for them. The recipient can retrieve the file at leisure. 



Intranet FTP Services 

FTP can provide the backbone for providing file transfer capability 
to users on your Intranet. In many ways, FTP is a superior trans- 
port mechanism to MacOS File Sharing. For one thing, FTP is 
cross-platform, so Unix and Windows users on your Intranet will 
be able to access files. Furthermore, TCP/IP is a more robust pro- 
tocol than AppleShare. For example, the Internet has never crashed 
and was originally designed to widistand a nuclear attack. In con- 
trast, a crash on an AppleShare network usually takes out several 
Macs at a time. 

As mentioned previously, TCP/IP is a means of transporting infor- 
mation over nodes on the Internet; in contrast, AppleShare is based 
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on AppleTalk, which was designed primarily as a means of printing 
documents onto LaserWriters and ImageWriters. AppleTalk is a 
very inefficient and chatty protocol that requires a lot of network 
bandwidth to transport a small amount of information. Chatty net- 
work protocols usually allow traffic to flow back and forth several 
times between two nodes before a transfer is complete. This traffic 
is usually diagnostic in nature, meaning that the sender and recipi- 
ent are constantly checking, during the transfer, on one another. 
This extra traffic slows down your file transfer. 

Possible fimctions for FTP on your Intranet include the following: 

□ Storage of organizational reports, documents, and memoranda 

□ Archive of graphical images, photographs, or video clips 

□ Archive of site-licensed application software 

Users in your organization can access your FTP server for the pur- 
pose of accessing files of the types previously described. The added 
advantage of modern Web browsers, such as Netscape and Mosaic, 
is that they double as FTP client applications. In this manner, your 
users can employ Netscape as a fully functional Intranet access 
client. 

Using FTP on the Macintosh 

FTP service has a long history under the Unix operating system. 
From the Unix command line, users can open an FTP connection 
to a remote computer and exchange files with the remote com- 
puter. Arcane commands, similar to Unix operating system com- 
mands, are required to navigate the remote file system. 

FTP clients for the Macintosh were developed soon after the intro- 
duction of MacTCP. Previously, users had been forced to dial into 
bulletin boards and download the files by modem. With FTP cli- 
ents running on Ethernet networks, suddenly you could dovmload 
files to your Mac with a quantum leap in speed over modem 
speeds. Furthermore, the antiquated FTP interface needed to be 






Chapter 10 



FTP Services 



285 



updated to be more user-friendly for many Mac applications. Op- 
tions that were previously driven by arcane command-line options 
were now available under the familiar pulldown menu paradigm. 

Using capabilities under System 7, FTP clients on the Macintosh, 
such as Fetch and Anarchie, have blossomed in capability. Using 
AppleEvents, FTP clients can be launched from other applications 
such as text editors and newsreaders. Drag-and-drop capability has 
been added to FTP clients; with this feature, you can drag a collec- 
tion of files to your client window and initiate an FTP transfer. 
Similarly, you can drag files off the client window onto your desk- 
top, thereby transferring those files to your Mac. 




Using the Internet Cohfig application and the ICeTEe extension, 
both provided in the NetPtesenz folder on the Intranet CD-ROM 
in this book, you can define default applications for FTP, Usenet, 
and Web browsing among others. The ICeTEe extension enables 
you to double-click on any URL to activate the appropriate 
browser as defined in Internet Config. The URL has to appecir in 
an editor that employs the MacOS TextEdit resource. Applications 
that use this resource include SimpleText and Eudora. 



Many of the large FTP archives on the Net are running on large 
Unix machines. In contrast to the MacOS, FTP service is built into 
the Unix operating system; FTP connections are handled much like 
remote Telnet logins. In order to serve files through FTP on your 
Mac, you need to install an FTP server. These servers act like the 
HTTP servers described in Chapter 4, in that they respond to your 
FTP client requests. In addition to text and binary transfers, Mac 
FTP servers can serve files using the MacBinary format. The 
MacOS stores file information in the data and resource forks; the 
MacBinary file format allows an FTP server to transfer both sets of 
information, thereby preserving the integrity and usefulness of the 
transferred file. 

Two FTP servers in use for the MacOS arc NetPresenz by Peter N. 
Lewis and InterServer Publisher by InterCon Systems Corporation. 
Both applications are multi-protocol Intranet servers in that they 
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can distribute files using WWW, Gopher, and FTP. This is an ad- 
vantage because you will likely implement WWW and FTP services 
on your Intranet. These applications give you an integrated means 
of serving these protocols; otherwise, you will need to implement a 
separate WWW server and FTP server application. To run both 
applications, you will need System 7 as well as a properly config- 
ured version of MacTCP. It’s recommended that you have at least 8 
MB of RAM and sufficient hard drive space to contain all the files 
you want to serve. 

Using NetPresenz 

NetPresenz is a shareware implementation of an FTP, Gopher, and 
Web server. In its original incarnation, NetPresenz provided only 
FTP ser\ice, but Gopher and later Web services were added. Net- 
Presenz 4.0.1 is Power Mac-native and is compatible with Open 
Transport, according to Peter Lewis, the program’s author. 



Installing NetPresenz 




NetPresenz 4.0.1 is found on the CD-ROM in this book. Drag it 
over to a desired folder on your hard drive. If you have not already 
started Internet Config on your Mac, do so now. Internet Config is 
required for NetPresenz and is a good application to have running 
on your computer. 




For the sake of simplicity, the discussion on using NetPresenz 
as a Web server was deferred from Chapter 4 until this point. 
NetPresenz's greatest utility is its FTP service; therefore I chose to 
include the full discussion of the application in this chapter. 




As with all shareware on the CD-ROM, purchase of this book does 
not fulfill your shareware obligations. If you use this software for 
more than a limited amount of time, you are obligated to pay your 
shareware fee. 
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Creating MacOS User Accounts for Use by 
NetPresenz 

To assign user privileges, NetPresenz makes use of the accounts 
established under System 7’s AppleShare hierarchy. For this reason, 
you’ll need to have File Sharing turned on. If File Sharing has not 
been enabled, then open the Sharing Setup control panel, as shown 
in Figure 10.1. Enter the name and password of the computer’s 
administrator. Enter the Macintosh name as well. 




The computer name in the Sharing Setup control panel is only for 
the benefit of AppleShare users; this name does not affect your IP 
node registration. 



! Sharing Setup ] 



_ Netujork Identity 



Owrwr N«m: 

Ovntr Password: |— — | 



MoeintoshNamo: | Jo»*i fiactetosh 



n 



File Shoring 



1 J 


i~8tates~.>.. — - .... ........ 

File sharing is off. CMok Start to allow othor usars 
to aooass shared folders. 







Progrom Linking 

.States.. 



f SiflD ] I Proflram linking Is on. Click Stop to provant other 
I J ^ufr$ from linking to gour shared programs. 



Figure 1 0.1 Fi/e sharing is enabled usin£f the Sharing! Setup 
control panel. 



Now open the Users & Groups control panel. This control panel 
enables you to add user accounts so that otlier Mac users can access 
certain parts of your disk drive. NetPresenz uses this account struc- 
ture to enables users to set up FTP connections to your Mac. 

To add a user, click on the File menu and choose New User. An 
icon similar to die faces shown in Figure 10.2 will appear. Type the 
user’s name in the field below the icon and double-click on the 
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icon. A dialog box will appear, prompting you to enter the user’s 
password (see Figure 10.2). Click on the appropriate checkboxes to 
allow the user to connect to the server and to change his or her 
password. Repeat this procedure for as many users as you need to 
define. 
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□ 0 ■ 
<Gutst> 











Figure 1 0.2 NetPresenz uses the accounts setup in the Users & 

Groups control panel to enable FTP access. 



Designating Your FTP Folder 

Now you need to create a folder on your hard drive from which 
you want to serve files via FTP. Click on the File menu, dragging 
down to Sharing. A dialog box similar to that shown in Figure 10.3 
will appear. 
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Figure 1 0.3 Tou can set the file sharing preferences to configure 

NetPresenz access. 
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As the Owner, you’ll want to allow yourself privileges to see folders 
and files and to make changes; check these boxes accordingly. Next, 
assign privileges to the various users you have defined by scrolling 
through the User/Group popup menu and selecting the users and 
dieir privileges accordingly. For guest or anonymous FTP access, 
you will almost certainly not want to check the Make Changes box. 
NetPresenz enables anonymous FTP users with whatever privileges 
you supply guests under File Sharing. Therefore, if you allow your 
guests to make changes, any anonymous FTP user can add or de- 
lete files and folders within the folders you have defined. 



NOTE 






You can enable groups of FTP users with the same privileges by 
creating a File Sharing group under the Users & Groups control 
panel. For folders like the Pub folder, you can set similar privileges 
for all non-anonymous FTP users. 



Finally, you can check the box entided Make all currendy enclosed 
folders like this one, if that is indeed what you want. All the privi- 
leges that you specify in a root folder then get carried down to a 
nested folder, unless you define that nested folder differendy. For 
this reason, you will need to be careful when checking this box on 
any folder on which guest users have write privileges. 

Repeat the above procedure for all folders that you want to open 
for FTP access. User folders can exist anywhere on your Macintosh 
desktop, but associated users must have the proper privileges. For 
example, assume you have a folder entitled Pub and there’s a folder 
named Steve inside. You want to name Steve, the folder, as the root 
directory for Steve, the user. You must allow Steve the user privi- 
leges to get inside Pub folder. The File Sharing privilege arrange- 
ment can be difficult to understand, so when you get NetPresenz 
up and running, you will likely need to test your guest and user 
privileges. 

Configuring NetPresenz for User Access 

At this point, you are ready to start FTP service on your Mac. 
NetPresenz actually is configured by the NetPresenz Setup applica- 
don. Before launching NetPresenz Setup, double-click on the 
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NetPresenz application to start the FTP service. The NetPresenz 
access log should appear. Now that the NetPresenz application is 
up and running, you have officially opened your doors to the Inter- 
net. Double-click on the NetPresenz Setup icon to launch the 
application. 



Upon opening the NetPresenz Setup application, you will see a 
configuration panel, as shown in Figure 10.4. By clicking on the 
various icons, you can configure security for FTP, WWW, and 
Gopher services provided by NetPresenz. Let’s start by talking 
about FTP security. 
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m 




g| 


m 

Sumnury 



Figure 10.4 Toti can customize FTP, and Gopher privi- 

lepjes to your server with the NetPresenz Setup confipuration panel. 



Setting Up FTP User Privileges 

Clicking on the FTP Setup icon in the configuration panel brings 
up the display shown in Figure 10.5. This display is separated into 
three sections: Privileges, Miscellaneous, and SIVC. In the Privi- 
leges section, you see that there are three types of users: Owner, 
Users, and Guests. Each of these user types has four different types 
of access: None, Read Only, Upload, and Full. Access privileges are 
configured by using the popup menus located beneath each of the 
three types of users. The FTP users and privileges are defined in 
Table 10.1. 

Table 10.1 FTP Users and Privileges Definition 

Types of Users 

Owner Owner of machine as defined in the Sharing Setup 
Control Panel. 

User Anyone ^\ith user privileges defined in the Users & 

Groups control panel. 

Guest Someone who accesses the serv^er through anonymous 

FTP. 
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Privileges 


None 


User has no access. 


Read Only 


User can navigate through folders and download files 
but cannot transfer files to server. 


Upload 


User can download and upload files to server but can- 
not overwrite or delete existing files or folders. 


Full 


User has full run of the system. User can add, delete, 
and rename files and folders. 




Figure 1 0.5 Tou can specify access privileges as well as other mis- 
cellaneous settin£fs with NetPresenz Setup. 



You have to assign privileges to all your users as a unit. For exam- 
ple, you cannot let one user have Upload capability and another 
user have Full access. 

Ideally, you will want to enable tlie Owner to have full access to the 
server; click Full for Owner privileges. Often, you’ll want users with 
accounts on your machine to be able to upload files; if so, give the 
Users class the capability to upload by selecting Upload from the 
pop-up menu. Finally, you will want Guests to be able to download 
files, but not be able to change anything on your server; therefore, 
assign Guests the Read Only privilege. 






Assigning Home Folders 

Like out-of-town guests, you need to find room for FTP users once 
they stop in for a visit. When users log in, they will have initial ac- 
cess to a folder that you specify. Clicking on the FTP Users icon in 
the NetPresenz Setup configuration panel enables you to specify at 
which points in your file system different users start out. A dialog 
box such as that shown in Figure 10.6 will appear. 




Figure 1 0.6 Tou can set home folders for your FTP users in 
NetPresenz. 

You can specify login directories for the following types of users: 

□ Default, This specifies all users including die Owner, all de- 
fined Users, and Guests. 

□ Owner. This specifics the administrator’s home folder. 

□ User (Default). You can specify one default directory for all 
your defined Users. 

□ Guest. Guests can start out in a specific directory. 

□ Individual Defined Users. Your defined Users can each have 
a default login directory. 

The above options are all available in the pulldown User menu 
shown in Figure 10.6. 

To specify the login directories, you need to enter the path leading 
to the desired folder. The folder names need to be delineated with 
the forward slash (/). On your desktop, for example, you might 
have a public folder called Pub. In Pub, you might have a folder 
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named Steve, and you’d like to designate that folder as the login 
directory for a user named Steve. You would scroll down the User 
popup menu until you got to Steve’s name. In the Login Directory 
field, you would enter /Pub/Stcve. Steve would need to have ac- 
cess to the folder Pub. 




There is no limit to how far down a folder tree you can locate a 
login directory. The first folder that you specify in the Login Direc- 
tory path has to be the highest folder in the tree that's accessible 
by the User. 



In addition to defining the directory tree, you also can define com- 
mands that are executed upon the user’s login. These need to be 
standard FTP commands and will be discussed later in this section. 



Securing Your NetPresenz Connections 

You can override some of the File Sharing permissions you declared 
earlier using NetPresenz Setup. Click on the Security icon in the 
NetPresenz Setup configuration panel. A display much like that 
shown in Figure 10.7 will appear. This display is divided into four 
sections: General Security, Connection Sounds, User Restrictions, 
and Owmer Restrictions. 



Security 



S^ourtty 1 Cort>#otten Sounds 

^ Log Rctions to File I <S> None 

^ Hide Log in Background | O Speak Messages 

□ RIIoui Clear Tent Passwords | O Ploy Sounds 

Uf*r RostrteMons 

I ^RllouiGet (SI Hiioul Rename 

^RllowPut ^Rllow Delete 

^ Rlloui Change Password (SITE P) ^ RIlow Change Prius (SITE C) 
^Rilow IndeH Search (SITE INOEK) 

Ovn*r Rostrlotiem 

^ RIlow Process Control (SITE R) ^ RIlow FTPd Shutdown (SITE Q) 
[ Cancel | | Heuert ) 



Figure 1 0.7 NetPresenz Setup enables you to set the desired level 
of security you need for your FTP server. 
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Under the General Security section, you can check three options. 
First, you can toggle access logging. Checking die Log Actions to 
File box causes NetPresenz to record file transfers to the access log. 
This log file is accessible when you launch the NetPresenz applica- 
don, but we’ll discuss it in more detail later. You can also hide the 
log in the background when NetPresenz is not in the foreground. 
Finally, you can prevent users from mounting AppleShare volumes 
that require clear text passwords. 




The term clear text passwords describes the authentication 
method used by some AppleShare servers. These servers accept 
passwords using straight ASCII text, which can pose a security risk. 
Your system could be compromised through the use of sniffer 
programs, which record transmissions on the Internet. 



In the Security interface, you also can specify if you want some sort 
of signal when connections are established with your server. You 
can tell NetPresenz to speak messages when users log on and off or 
when you launch or shut down NetPresenz. This is useful if the 
server resides within earshot of your office. As an alternative to 
having NetPresenz speak to you, you can check the Play Sounds 
button to have NetPresenz beep when users log on and log off. 

The check boxes in the User Commands section detail the type of 
control that you can exercise over defined FTP users. The controls 
can be summarized as follows: 



Restrictions on FTP User Access 

Checkbox Description 

Allow Get Enables users with Read Only access to down- 

load files. 



Allow Put 

Allow Rename 

Allow Delete 

Allow Change 
Password 



Enables users with Upload access to upload files. 
Enables the Owner to rename files and folders. 
Enables the Owner to delete files and folders. 
Enables all users to change their passwords. 
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Checkbox Description 

Allow Index Search Enables users to search the server using SMNT 
commands. 

Allow Change Privs Enables users to change privileges of folders 
they own. 

You also can place two restrictions on the Owner. You can allow the 
Owner to launch and close processes on the server. This would be 
advantageous if you had a script that you wanted to execute re- 
motely. You could, for example, have Eudora check your mail on 
the server and then download the messages to your remote client. 
You also can enable the Owner to shut down the server remotely. 

Miscellaneous FTP Configuration 

You can apply a variety of miscellaneous customizarions to 
NetPresenz. In the FTP Setup, you can set the maximum number 
of concurrent FTP users (refer to Figure 10.5). This number will 
have to be adjusted by reviewing performance of the server after it’s 
been running a while. You are under the restriction of 64 simulta- 
neous connections. To reserve MacTCP connections for other ap- 
plications on your server, you may want to limit the number of 
maximum users to 40-50, thereby guaranteeing that other Internet 
applications will have connections available. You also can set the IP 
listening port. On the Internet, the standard IP port for FTP is 21. 
You may want to alter this port if your FTP server is not behind a 
firewall or some device that restricts access from the Internet. 

We’ll talk more about security in Chapter 14, “Sample Intranet 
Applications.” 




NOTE ^ If you want to set up an experimental FTP server, set the port 

^ number to greater them 1024. 

NetPresenz maintains the capability to transfer files using the Mac- 
Binary protocol. By checking the MacBinary Initially Enabled box, 
you turn on MacBinary as the default transmission method. Also, 
by checking the next box below, you can have NetPresenz convert 
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files to a 7-bit text format using the BinHex algorithm before trans- 
ferring them to the FTP client. Lastly, you signify whether you 
want the user to see invisible files in the server directories. 

SIVC Duty 

SrVC stands for Standard Internet Version Control (SIVC — 
pronounced “civic”). This protocol is used to allow applications to 
communicate with SIVC servers for the purpose of transmitting 
information on how and when the software is being used. Certain 
Macintosh applications are SFVC-aware, such as NetPresenz, 
Anarchie, MacTCP Monitor, and others. By checking the box in 
the FTP Setup display, you allow NetPresenz to periodically trans- 
mit information to a SIVC server; this transmission details such 
information as the server IP address, the software version, and 
other data useful for tracking the application usage. SIVC allows 
shareware authors to determine who is using the software and what 
versions are being used. This information, along with the rest of 
the SrVC data, enables authors to better gauge the distribution of 
their software. 




Clicking the I Paid checkbox returns a grateful response from the 
author. Try it. 



Running NetPresenz in the Background 

You can run NetPresenz in the background by clicking under 
the File Menu, in NetPresenz Setup, and dragging down to 
NetPresenz Background Mode. Choose the copy of NetPresenz 
that you want to run in the background and click the Background 
Only checkbox. When running in Background Mode, you will not 
be able to access, nor direcdy quit, the NetPresenz application. You 
will need to quit the file using the same process management appli- 
cation or through AppleScript. A simple AppleScript to do this is 
given here. 

tell application "NetPresenz" 
quit 

end tell 
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Another ramification of running NetPrescnz in the background is 
that you will not have access to the NetPrescnz log file. 




For better performance on a machine that is a dedicated FTP 
server, run NetPresenz in the foreground. This will improve access 
and give you real-time access to the NetPresenz access log. 



Remote NetPresenz Commands 

NetPresenz accepts various commands designed to configure the 
server remotely from a command-line FTP session. Some of these 
commands arc summarized in Table 10.2. 



Table 1 0.2 NetPresenz File Transfer Options 



Remote NetPresenz Command 


Description 


get ‘file’ 


Get ‘file’ from server 


get ‘file’. data 


Get the data fork of ‘file’ 


get ‘file’.rsrc 


Get the resource fork of ‘file’ 


putiget ‘file’. bin 


Put or get the MacBinary version 
of the ‘file’ effectively combining 
the data and resource file forks 


putiget ‘file’.hqx 


Put or get the BinHex version of 
‘file’ 



Mounting Remote AppleShare Volumes 

Not only can you access a remote Mac using NetPresenz, you can 
access all the available Macintosh computers on the remote com- 
puter’s AppleTalk network. This is a powerful and potentially disas- 
trous capability, giving anonymous FTP users from all over the 
world access to all the File Sharing-enabled computers on the re- 
mote local area network. 

Using the FTP Structure Mount (SMNT) command below, you 
can mount a remote AppleShare volume. 



quote smnt volume :server@zone: username: password 
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If you are attempting to access a server in the same AppleTalk zone 
as your NetPresenz server, you can use @* instead of ©zone. If 
your username and password are the same as your NetPresenz ac- 
count, you can leave them out. For example, you want to mount a 
volume entided Public off a server entitled Steve’s Mac. This server 
is in the same zone as your NetPresenz server, and you have the 
same user information on this remote volume as you do on the 
NetPresenz server. Your SMNT command would then be 

quote smnt Public: "Steve's Mac” 

To avoid bringing the wrath of your network administrator down 
upon you, I recommend disabling this feature unless your remote 
AppleShare volumes are tightly secured and controlled with guest 
accesses. 

Other SMNT commands include those described in Table 10.3. 



Table 10.3 SMNT Commands Used on NetPresenz Servers 



SMNT Command 


Description 


quote site u 


Display server’s current usage statistics in- 
cluding available memory and connections, 
number of users, and so on. 


quote site v 


Display server’s ongoing statistics including 
total number of logins, total bytes trans- 
ferred, server up-time, and so on. 


quote site s 


Use short DOS-like file names. 


quote site 1 


Use 31 -character file names. 


quote site h eld 


Enable (Disable adding .hqx file suffixes. 


quote site q 


Shut down NetPresenz process. Use with 
care. 


quote site index ‘string’ 


Search your NetPresenz server for files or 
folder names that contain string. 


quote site p ‘password’ 


Change your password. 


quote site a list 


Display list of running processes along with 
their creator codes. 



quote site a oapp ‘code’ Launch application with creator type code, 
quote site a quit ‘code’ Quit application with creator type code. 
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These commands can be entered from command-line FTP sessions, 
or they can be entered in certain ways using Mac FTP clients. Fur- 
thermore, these commands can be entered as initial login com- 
mands under the FTP Users display shown in Figure 10.6. This 
enables you to have certain commands executed when certain users 
log onto the server. An Owner, for example, may want the server 
statistics displayed when logging onto the system. 



Displaying the NetPresenz Access Log 

One advantage of running NetPresenz in the foreground is that 
you have access to the NetPresenz log. An example of this log is 
shown in Figure 10.8. Note that NetPresenz tracks when the server 
is shut down and started up. You also have records of when users 
log in, from what IP address the request originated, what password 
they used, and which files they downloaded. 




Invalid accesses are logged as well. This is a good source of moni- 
toring potential security problems with your server. 



12<J4PM 12/16/93 205J232.17.182 tea 15 login Ovnw- 
1205 PM 12/16/93 205.252.17.182 tea 15 gat fil* MaoTCP 
12.-06PM 12/16/95 205252.17.182 tea 15 logout Ovnw' 

1:45 PM 12/17/95 205252.17259 tea 16 fallad login 
1:45 PM 12/17/95 203252.17259 tea 17 failed login 
1:46PM 12/17/93 203232.17259 tea 18 login Ovner 
1:46PM 12/17/93 205252.17259 tea 18 logout Ovner 
12:17 AM 12/19/95 205J232.17.178 tea 19 login Ovner 
12:18 AM 12/19/93 205252.17.178 tea 19 getfOe smitherf.gif 
12:18 AM 12/19/93 205252.17.178 tea 19 logout Ovner 
421 AM 12/19/95 195.101.168.34 fuchs»litef.de 20 log In Quest 

423 AM 12/19/95 195.101.168.34 fuchs®litef.de 20 get file ftnalrepxip 

424 AM 12/19/95 193.101.168.34 fuohs(»litef.de 20 get file FINALREP2IP 

429 AM 12/19/95 193.101.168.34 fuohs®Ktef.de 20 logout Quest 

930AM 12/19/95 205252.17.69 tea 21 login Ovner 

931 AM 12/19/93 203232.17.69 tea 21 get file mathematioaJjtml 
9:32 AM 12/19/95 205252.17.69 tea 21 get file cleartar.gif 

933 AM 12/19/93 205232.17.69 toa 21 get file Sears.OIF 

934 AM 12/19/93 203232.1739 toa 21 getfile macGF 

934 AM 12/19/93 205252.17.69 tea 21 getfile tm.gif 

933AM 12/19/93 203232.17.69 tea 21 getfile eonstructtenOIF 
9-35 AM 12/19/93 203252.17.69 tea 21 log out Ovner 

353PM 12/20/93 144212.12.42 potvtn^mathvorks.cofn 22 login Guest 
336PM 12/20/95 144212.12.42 potvin@mathvor1csxo»n 22 getfile FinalReport4>s 
3.56PM 12/20/95 144212.12.42 potvin(?mathvorks .com 22 logout Guest 



Figure 10.8 Tou can track NetPresenz activity using the 
NetPresenz access log. 
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Setting Up FTP Introductory Messages 

You can display messages to users when they log in to your server. 
These messages can detail news about the server or conditions for 
its use. These messages may be different for anonymous FTP ac- 
cesses versus Owner and User connections. In the NetPresenz ap- 
plication folder, there is a folder entided Startup Messages. Three 
files reside in this folder, which can be edited with a text editor 
such as SimpleText. These files are named Guest Startup, User 
Startup, and Peter Startup. These files are displayed when the 
Guests and Users log into your server. You can change the name of 
Peter Startup to reflect the Owner’s user account. 




As an alternative to residing in the NetPresenz folder, the Startup 
Messages folder can be stored in the NetPresenz Preferences 
folder. 



You also can display messages to the users when they move into 
certain folders. The contents of a file with the name IFolder Info 
will be displayed when a user moves into that particular folder. 
These files are limited to 5 KB in size, so excessively large messages, 
such as directory listings, can be stored as files within the folder and 
referred to in a smaller IFolder Info file. 



WVWV Service 



NetPresenz 4.0.1 provides HTTP services. To enable WWW access 
through NetPresenz, go to the NetPresenz Setup application and 
click on the WWW Setup icon. A dialog box, similar to that shown 
in Figure 10.9, will appear. You enable WWW service by checking 
the box at the top of the dialog box. You can specify the root direc- 
tory for WWW service in the same way that we did for the different 
users. Furthermore, you can specify the TCP/IP listening port; as 
we discussed in Chapter 4, the default port for HTTP transactions 
is port 80. 




The default Web page for a directory under the NetPresenz hierar- 
chy is index.html. For example, if someone sends a request to 
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http://www.anyplace.com, a file entitled index.html that resides in 
the directory specified in the WWW Setup dialog box will be re- 
turned to the browser. 



immu Setup 

s imulu Enabled □ CGI Enobled 

Root Directory: 

You cen mount extra volumes by specifying SMNT commends for 
the Guest user In the FTP Users window. 

WWW Port; [80 I [ Cancel ] [ Reuert ] [[ Saue | 



Figure 1 0.9 NetPresenz offers rudimentary control of WWW 
services. 




You can restrict and enable host accesses by IP address. However, 
this requires editing a resource in the NetPresenz file, or ultimately 
the NetPresenz Preferences file using a resource editor such as 
ResEdit. This is a messy way to perform a much-needed task, and 
I'm sure later versions of NetPresenz will use more straightforward 
ways to restrict IP addresses; so refer to the NetPresenz documen- 
tation for explanation of this process. 



Using InterServer Publisher 

Chapter 4 discussed using InterServer Publisher as a fiill-service 
Internet server. You can use Publisher as an integrated WWW, FTP, 
and Gopher server. This section discusses how to use Publisher as 
an FTP server. 

Installing InterServer Publisher 

In the InterServer Publisher on the CD-ROM, double-click on the 
InterServer installer icon. You’ll be presented with the standard 
installer dialog box. You’ll then be queried as to whether you want 
an Easy Install or a Custom Install. The Easy Install option will add 
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a lot of ancillary software, such as a huge assortment of clip art, 
the HTML Pro editor, the graphics utility GraphicConverter, and 
InterCon’s own Web browser, NetShark. If you do not already 
have a copy of MacTCP, you can install it now; if you have one but 
it’s not as recent as version 2.0.6, the installer will replace your 
version. By choosing Custom Install, you can always pick and 
choose which features you would like to add. Select where you 
want the application installed and proceed with the installation. 

Let’s assume that you performed the full installation of InterServer 
Publisher. The instaUer inserted the InterServer Publisher extension 
into the Extensions folder of your System folder. Unlike other in- 
stallations you may have nm, you are not required to restart your 
Mac after the installation. 

The InterServer Publisher extension does all of your WWW, FTP, 
and Gopher service. Four applications are used in conjunction with 
the extension. These applications are described here. 

Application Description 

InterServer Publisher Setup Initializes Publisher and configures 

WWW, FTP, and Gopher service 

StartServer Starts Publisher service 

StopServer Stops Publisher service 

InterServer Log Viewer Views access log window without using 

InterServer Publisher Setup 



These four applications are all that you need to run your WWW 
server. Just double-click on the StartServer icon and you are ready 
to start publishing on your Intranet Web. 

Using InterServer Publisher Setup 

The InterServer Publisher Setup application is by fer the most in- 
volved of all the ancillary applications you’ll need to run to set up 
WWW services using InterServer Publisher. Double-click on the 
InterServer Publisher Setup icon to launch the application. If you 
have not launched the StartServer application, launching Setup will 
initiate this process. 
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The InterServer Publisher Configuration editor will appear on your 
desktop. It looks similar to the old pre-System 7 control panel ar- 
rangement, as shown in Figure 10.10; as in the figure, the Minimal 
configuration panel should be active. In the field marked General, 
you need to specify your server’s node name. To enable your 
WWW service, simply click the box entitled Enable World Wide 
Web server. Presto! You’ve launched your Intranet Web service! 



m 



1 1 More G«ph«r I 



IntertHiyver PiiblWwy toiiftfliiriitlon ! 



Vorld-Vtd* V»b Server - 




ErMbk Vof 1d-VkJ* V*b 

Fold#r: /Bflngo/CommunlMtlons/InferS^rvtr 



p-Bopli*r S*rv»r — 

[S Eiubw Gophtr S*rv«r 

Fotd«r: /Bongo /Communie4hoos/lnt*rS«rv«r 



□ EnabV FTP Sorvor 

FoMor: /Bongo/System FoM*r /Control Porwis 



Figure 10.10 JTje InterServer Publisher Minimal configuration 
enables you to customize important features of your Web services. 



To further configure your Intranet FTP server, you need to click on 
the More FTP configuration panel. In this panel, shown in Figure 
10. II, you have additional parameters widi which to customize 
your server. You can enter the maximum number of simultaneous 
FTP connections. Sizing this number higher enables more users to 
connect to your server but can slow down your FTP processing. 
This number will likely need to be adjusted after viewing the ser\xr 
statistics. 

You also can specify the time that you want to hold open idle con- 
nections. Remember that the more connections you hold open, the 
fewer chances you have to handle other FTP requests. You will 
want to keep FTP sessions open for a litde longer than you allowed 
for HTTP connections. Normal FTP connections consist of file 
transfer and navigation between folders. As a result, there may be 
idle connections as the user ponders navigation options. Despite 
the burden the FTP connections place on your server, it is advisable 
to keep idle connections open for as long as 3 to 5 minutes. 
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Figu re 1 0. 1 1 Additional configuration ofInterServer Publisher 
FTP services can be effected with the More FTP configuration 
panel. 



NOTE 






Because of the limitation on the number of MacTCP connections, 
InterServer Publisher limits you to a total of 50 connections shared 
between your FTP, Gopher, and WWW servers. 



Securing Your Server 

You can use the InterServer Publisher Setup application to secure 
your server in the following ways: 

□ Specify domains and addresses to be allowed and denied ac- 
cess to the server 

□ Create user accounts and passwords 

□ Utilize security realms to restrict access to certain files and 
folders 



Restricting Host Access 

In the InterServer Publisher Setup application, click on the Host 
Access configuration panel. The display should look like Figure 
10.12. You can enter the domain or IP address in the Web Allow or 
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Web Deny text fields. For example, to allow access only to mem- 
bers of the domain anyplace.com, you would enter ©anyplace.com 
in the Web Allow field. Conversely, you could deny access to the 
entire domain by entering ©anyplace.com in the Web Deny field. 

You also can specify subnets that you want to restrict or enable 
access to your server. Entering the string 128.184.22 in the FTP 
Deny field, for example, restricts any address in the 128.184.22.xxx 
subnet. Entering any domain in the FTP Allow field, although leav- 
ing the FTP Deny field empty, enables only that domain to access 
the server. Conversely, entering any domain in tlie FTP Deny field, 
while lea\ing the FTP Allow field empty, restricts only that domain 
from accessing files on that server. 

This is an important tool because it will enable you to restrict access 
to certain areas of your server. Even if your server is blocked off 
from the Internet, you may want to restrict access to your market- 
ing data from anyone outside your marketing department. By locat- 
ing your marketing department behind a subnet, as discussed in 
Chapter 2, you can restrict all other subnets within your Intranet 
from this part of your FTP site. 




Figu re 1 0. 1 2 The Host Access configuration panel enables the 

InterServer Publisher Setup application to restrict or enable access 
based on the user^s Internet address. 
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Adding Users to Your Server 

You not only can restrict or enable access by domain, but you also 
can customize the privileges of individual users. Users with similar 
privileges are grouped into realms; members of realms have access 
to certain files and folders. Before we talk about realms, we need to 
learn how to add users to the system so that we can create realms. 

Scroll down the left side of the Setup application and click on the 
Users configuration panel. A dialog box similar to that shown in 
Figure 10.13 will appear. In the top right of the window, there are 
three buttons: New, Rename, and Delete. Click on New to create a 
new account. A New dialog box will appear and you can enter die 
user name. Click OK to close the New dialog box. Back in the Set- 
up applicadon, you can enter a password for this new user. Note 
from Figure 10.13 that the password field is blocked, but unfortu- 
nately there is no password verification scheme. You dien enter a 
case-sensitive password for the user. Once you have accumulated 
enough user accounts, you will be able to change die user names or 
even delete accounts using the Rename and Delete buttons. 
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Figure 10.13 Security realm user accounts can be created using 
the Users configuration panel. 



The bottom half of the dialog box in Figure 10.13 specifies FTP 
user privileges. Using the radio buttons and checkboxes in this 
dialog box, you can enable the user to access the entire hard disk or 
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just the folder specified in the Minimal configuration panel. You 
also can specify whether the user can upload files to the server or 
delete files fi"om the server. 



Creating Security Realms 

After you have accumulated a stable of potential users, you can 
arrange them into secure realms. Attributes of these realms can be 
configured to permit all the relevant users to access certain parts of 
the file system. After privileges have been assigned to a realm, 
members of that realm can access files that contain certain key- 
words. These realms are constructed using the Security configura- 
tion panel. 

Using realms, you can allow InterServer Publisher to restrict access 
to your system. This is useful to restrict access to information such 
as personnel files or some data that needs to be accessed by people 
from different subnets. InterServer Publisher allows you to restrict 
access from users from different subnets, but if your intended users 
are sprinkled throughout your Intranet, you’ll need to construct 
security realms to provide needed security. 

Upon clicking on the Security configuration panel, as shown in 
Figure 10.14, you will see a list of user accounts that you have cre- 
ated. Once again, there are three buttons in the upper right of the 
dialog box. In order to create a new realm, click the New button. 
You’ll be prompted for the name of the new realm. Enter the name 
and click OK. 

Members of a particular realm can access files that contain a certain 
string. For example, if the access keyword for a realm is “financial,” 
members of that realm will be able to access any file or folder 
whose name contains the string “financial.” By selecting a realm in 
the Security configuration panel, a field opens up in the middle of 
the dialog box into which you can enter a realm keyword. In the 
user list field at the bottom of the page, you can add users to the 
realm by clicking on the column to the left of the user names. You 
can create several realms in this manner. As expected, you can re- 
name and delete realms using the appropriate buttons in the upper 
right of the dialog box. 
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Figu re 1 0. 1 4 Usiti£ the Security configuration panel, you can 

create realms that allow access to restrict folders or files. 



Maintaining an Access Log 

InterServer Publisher enables you to record a log of WWW, FTP, 
and Gopher accesses. The access history is written in a tab- 
delimited text file and the contents can be pasted into a spreadsheet 
such as Microsoft Excel or a database such as FileMaker Pro. As 
users access your server, pertinent information is written to the log 
file. You can manually archive versions of the log file or have ar- 
chives created automatically. Furthermore, InterServer Publisher 
enables you to view the log remotely. 

Configuring Your Log Characteristics 

Click on the Log configuration panel in the InterServer Publisher 
Setup application. A dialog box similar to that shown in Figure 
10.15 will appear. You can specify whether you want to archive the 
log file manually, have it done periodically, or have the file archived 
when it gets to a specific size. Your choices of periodic archiving are 
daily, weekly, monthly, or annually. Archiving your log file keeps the 
file size down and allows the individual archives to be small enough 
to be perused at a later date. Furthermore, if you want to view your 
log archives remotely, you can click the appropriate check box. 
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Figure 10.15 Specify certain access lo£ characteristics usin£ the 
Lo£ configuration panel. 



The InterServer Publisher log file can be viewed by clicking on the 
Setup menu and dragging down to Show Log File. The following 
access data will be displayed under each entry of the log. 


Log Field 


Description 


Date 


Date of access 


Time 


Time of access 


Server Type 


Type of access (Web, FTP, Gopher) 


Status 


Indication of successful transfer 


Client IP address 


IP address of client 


Client Node Name 


Alphanumeric IP address of client (if 
available) 


Transfer Size 


Number of bytes transmitted during 
request 


Connection Duration 


Duration of HTTP connection 


Authenticated User Name 


User’s name if transaction was 
authenticated 


Requested File 


File requested by client 


Additional Notes 


Various information provided by the 
server 



These fields are not configurable. 
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Archiving Your Log File 

As mentioned previously, periodically you’ll want to trim the size of 
your log file to prevent it from becoming too large. This is done by 
periodically saving your log to a separate file and clearing the log 
contents. You can maintain a series of archives to peruse your access 
statistics. 

One way to archive your log file is to do it manually. First, double- 
click on the StopSer\'er application, which causes InterServer Pub- 
lisher to refuse new connections. Find the log file, named Current 
Log, and give it some other name. The log files are stored in the 
InterServer Publisher Logs folder in the Preferences folder found in 
the System folder. Then activate the StartServer application to re- 
start your server. A new log file will be created. 

If you enabled remote viewing of your access log, you can access 
the current log and any archives you have created. You can bring 
up the log page in a Web browser using the following URL: 

http : / /your_server_address/ . log 

Your current log and any archive logs are available through hyper- 
text links on the resulting Web page. 

The InterServer Log Viewer is an appUcation that you can use to 
view the current log, if you are running Publisher on the same 
Mac. It’s a means of viewing the log file without having to open up 
the InterServer Publisher Setup application. 

Administering InterServer Publisher 

Now that you’ve learned how to configure InterServer Publisher, 
you need to learn how to administer the ongoing Web service. 
There are several tools and tips at your disposal. 

Using the Status Window 

The Status window is available under the Setup menu item under 
Show Status window. This window, shown in Figure 10.16, enables 
you to monitor current connections to your server. Each entry in 
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this window details the following information: connection type 
(WWW, FTP, or Gopher), client address, server activity, and com- 
pleted percentage of the request. At the bottom of the Status win- 
dow, the number of available free connections for each protocol is 
displayed. You can close a connection by selecting a transaction and 
clicking the Close Transaction button at the top of the window. 

Setting Up Your FTP Sharing Folder 

Okay, you’re almost there! It’s time to start populating your FTP 
Sharing folder. In the InterServer Publisher Setup application, you 
specified which folder would contain your documents. This folder 
now becomes the root folder for your FTP server file system. Fold- 
ers in this folder can contain FTP documents, provided they are 
indexed correctly in the FTP browser. 



You do not need to store BinHexed and MacBin^ versions of 
files iri your InterServer Publisher file system. If a user of an FTP 
i dient appends the hqx or bin suffixes to tiie desired file name, 
Publisher will send BinHex or AAacBinary versions of the files. 

Effective FTP Server Style 

No matter which FTP server application you use, you’ll be faced 
with some of the same issues in running an FTP server on your 
Mac, As always, you have to keep your audience in mind. Are your 
users interested in downloading applications or text files? Are your 
users primarily Mac users, or will Windows and Unix users be visit- 
ing your site? In this section, we will discuss some of the issues in- 
volved in running an FTP server. 




File Formats 

All the files that you will be serving can be classified into two for- 
mats: binary (or MacBinary) and text. Mac users will be happy to 
download applications from your server if they are stored in the 
MacBinary format. You could even serve Unix and Windows binary 
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files, provided they are not stored in the MacBtnary format. ASCII 
text can be stored for retrieval by an FTP client on any platform. 

One thing you will want to do is compress your binary files, and 
sometimes even your text files. As an FTP administrator, you want 
to provide service to as many users as possible. This means that 
you’ll want to reduce the amount of time tliat users spend down- 
loading files. For this reason, you’ll want to make your files smaller 
using various compression schemes. The most popular compression 
scheme used under the MacOS is made by Aladdin Systems Stuffit 
Deluxe. A Stuffit archive can be a significant fraction of the size of 
the original file; the degree of compression depends on the type of 
file. Self-extracting Stuffit archives are slightly larger than plain 
Stuffit archives. 

Between a Macintosh file server and a Macintosh FTP client, it is 
not always necessary to encode files using the BinHex algorithm. 
BinHexing a binary file converts it from an 8-bit format to a 7-bit 
format. This is useful for transferring binary data along media that 
only support text transfer, such as electronic mail. BinHexing a 
binary file, such as a Stuffit archive, can significantly add to the file 
size. For this reason, it’s important to evaluate on a case-by-case 
basis whether BinHexing a file is a useful means of storing the file. 



NOTE / 

o 



The file extension .sit denotes a file that has been stored in a 
Stuffit archive. The file extension .sea denotes a Stuffit self- 
extracting archive. You need a decompressing application, such as 
Stuffit Lite, Stuffit Deluxe, or Stuffit Expander to open a Stuffit 
archive. In contrast, a self-extracting archive works like its name 
suggests; some of the extraction algorithm is stored in the file 
itself so that double-clicking on the file causes it to uncompress 
itself. 



Options for Storing Text Files 

ASCII text is the ultimate cross-platform format. All operating sys- 
tems can interpret ASCII text once they accommodate the different 
line-breaking mechanisms. However, a 100-page text document 
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may not be useful served as straight ASCII text; a hard copy of such 
a document may be monotonous to read because diere are no for- 
matting or stylistic customizations. You need to determine whether 
in some instances you can store text files in alternative formats. The 
next most popular format would be PostScript. Serving a PostScript 
document enables the user to print it on a laser printer, thereby 
obtaining a more professional-looking document. 




Macintosh users can create PostScript documents from virtually 
any application, providing the LaserWriter driver is version 8.0 or 
higher. When printing the document, the user is given the option 
of printing to a printer or PostScript document. This document is 
viewable or printable by users on other operating systems. 



Another opdon is to convert the file to HTML. In this way, you 
can have your WWW server point to the file as well. Users can 
download the file for local viewing within a Web browser. The final 
option is to store the file in Portable Document Format (PDF) 
used by Acrobat Pro from Adobe Systems, Inc. The Acrobat 
Reader application is freeware and readily accessible through a vari- 
ety of Web pages and the usual anonymous FTP archives as well as 
Adobe’s home site. PDF is a cross-platform binary format; Win- 
dows and Unix users can read PDF files through their own versions 
of the Acrobat reader. The one drawback is that whereas the Read- 
er is freeware, the Acrobat Exchange is not. You need the applica- 
tion to write and manipulate files in PDF. 

Setting Up Mirror Sites 

If your organization has many users, your server becomes very pop- 
ular; so you may think about setting up a mirror site. A mirror site 
does not have to be halfway across the planet like some of the 
shareware archives maintain. Your mirror site can be located down 
the hall. Using a simple AppleScript or Frontier script, you can 
periodically transfer files from your main FTP archive to your mir- 
ror site(s). The script would run automatically, compare the file 
systems, and update the mirror site. 
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NOTE , If the two servers are on the same AppleTalk network, a useful 
w way of doing this is to use an application like Qdea's Synchronize! 
or Synchronize! Pro (http://www.qdea.com). Synchronize! com- 
pares two volumes and copies missing files or the most recent file 
versions to the appropriate locations. Synchronize! Pro is slightly 
more expensive, and it allows you more advanced administration 
features, such as login and graphical displays, to manage your file 
synchronization. 



Directory Structure 

Unlike the Unix operating system, the MacOS is not efficient at 
handling file systems with large numbers of files. For this reason, 
your server performance will suffer if you maintain folders that 
store hundreds of files. A good rule of thumb is to limit your fold- 
ers to storing 100 files. You can break up large numbers of files into 
smaller folders. 

Summary 

There’s more to your Intranet than your WWW ser\ices. As sophis- 
ticated as your Web pages may become, your WWW^ service is only 
a part of your Intranet and will be supplemented by other services 
such as your FTP site. There will be many instances where you will 
need to archive documents and files within your Intranet. Setdng 
up an internal FTP site enables you to provide a robust means of 
providing this data. 

In Chapter 11, ‘‘Email Ser\ices,” wx’ll look at yet another Intranet 
ser\ice that you can provide to your users. As always, feel free to 
skip to the following related chapters. 

□ Chapter 14, “Sample Intranet Applications,” to learn about 
some services you can provide using the WWW, FTP, and 
email technologies discussed in this book. 
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□ Appendix B, “Establishing an Internet Presence,” to learn 
more about adapting or expanding your Intranet to provide 
services to the Internet. 

Links Related to This Chapter 

Fetch http://www.dartmouth.edu/pages/softdev/ 

fetch.html 

Peter Lewis http ://www.share .com/peterlewis/ 

InterCon Systems http://www.intercon.com 

Aladdin Systems http://www.aladdinsys.com 

Qdea http://www.qdea.com 

Apple Mailing Lists http://www.solutions.apple.com/ 
apple-internet/ 
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Email Services 



Perhaps no other service you provide on your Intranet will be used 
more heavily than your electronic mail, or email, services. When 
your office network goes down, the first complaint you’ll hear from 
your users will be that they can’t check their email!!! Whether 
they’re kicking a message down the hall or across the planet, email 
has become in recent years a lifeline of communication in the work- 
place. With so many domestic users signing onto commercial online 
services, email has become a familiar part of many people’s lives. 

Providing email in the workplace has never been easier, and there 
are several useful email servers for tlie Mac. In this chapter, the 
basics of email administration will be covered. Some of these topics 
include the following: 

□ A discussion of how email works on the Net 

□ Some of the protocols used to get mail from one place to 
another 

□ A brief look at some commercial and freeware email servers 
for the Mac 

□ Installing and running the Apple Internet Mail Server 

□ Email clients for your Intranet users 

□ Good administration tactics for your email service 

□ Using and operating mailing lists 

In addition to discussing terminology, use of several software appli- 
cations will be reviewed. As with software covered in previous 
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chapters, my intent is to make this review as informative as possible 
without parching your throat on technobabble. Readers of this 
book are likely computer experts who plow into software only 
looking at the manual as a last resort. This book is by no means a 
software manual, but is designed to introduce you to those features 
of the program that you require to get up and running as soon as 
possible. Unfortunately, these software primers therefore wiH be 
drier than the rest of the book, but would you really rather be 
reading the documentation? 




See Que's Using Internet E-Mail for a more in-depth dfscu^lOn on 
email and its use on the Internet 



How Email Works 

For years, Internet users have used email to transfer messages and 
files across the country as a fast and inexpensive alternative to con- 
ventional methods of communication. Only in the last few years has 
email become commonplace in the work environment. Email has 
transformed the traditional office hierarchy; mailing your boss’s 
boss’s boss is no more difficult, though potentially disastrous, than 
sending a message to your officemate. I routinely receive mass mail- 
ings from my boss, whereas a few years ago, my coworkers and I 
would have received a hard copy memo in our mailboxes. Further- 
more, office email goes a long way to beating the ‘‘sneaker net” 
syndrome. In the brief interval between widespread PC usage and 
corporate email usage, users would commonly walk files over by 
floppy disk from computer to computer; email applications enable 
you to transfer files along with messages across the hall as well as 
across the country. 

Your email server will be the most heavily used portion of your 
Intranet services. You’ll need to establish a reliable server that can 
transfer large amounts of data, depending on the size of your Intra- 
net, without a lot of intervention on your part. Unlike FTP and 
Web services, which require constant updating and tweaking, email 
should be a “start-up-and-forget” service, meaning that other than 
adding users, you shouldn’t be paying a lot of day-to-day attention 
to your administration. 
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Like other Internet/Intranet services, email is a complicated service 
that has an increasingly friendly user interface. In the early days of 
email, users corresponded with one another on mainframes using 
arcane command-line editors. Now, many commercial email pack- 
ages exist that shield users from the inner workings of mail. How- 
ever, let’s take a brief look at the mechanisms used to transfer mail 
down the hall and across the planet. 

Simple Mail Transfer Protocol 

Simple Mail Transfer Protocol (SMTP) is one of the oldest mem- 
bers of the Internet protocol family. This protocol is used to route 
mail messages between hosts on the Internet. Users of local area 
networks, such as an AppleTalk network, use other protocols to 
disperse mail, but SMTP is a standard that enables you to commu- 
nicate with other users not inside your LAN. 

Your users will likely never need to worry about the intricacies of 
SMTP because your server will handle the intricacies of the 
protocol. Specifically, your server will employ some sort of mail 
transfer agent (MTA) that utilizes SMTP and other associated mail 
protocols to send your messages to other hosts. On Unix hosts, the 
sendmail application is a popular MTA, and your Mac server will 
employ a similar method of working with SMTP. 

Referring to a time-worn analogy, it’s illuminating to think of 
SMTP as the postal service that actually takes your letters and 
moves them either across the country or across the street. Much 
like your Internet email, your post office mail moves between vari- 
ous stops or other post offices before reaching its final destination; 
your email moves between various hosts, often in a geographically 
zig-zagged pattern, to get to its final destination. Your email serv- 
er’s MTA is much like the mail carrier who picks up mail from your 
mailbox and brings it to the local post office. 

MTAs are important links in your email messaging process for the 
same reason that you don’t personally deliver your letters and bills 
across town. Can you imagine driving a half-hour to the electric 
company’s offices to drop off your bill only to find out that the 
office had closed a few minutes earlier? You’d have to repeat the 
drive the very next day. Similarly, your mail recipients may not be 



320 



Building and Maintaining an Intranet with the Macintosh 



able to receive your mail for a variety of reasons — their server is 
down, their network is down, and so on. Rather than have a user’s 
email client repeatedly try to make the connection, the server’s 
MTA repeatedly tries to connect to the recipient’s mail server until 
it’s successful. After a specified period of time, the MTA throws up 
its hands and tosses the message back to the user with some form 
of diagnostic whining. 

Many commercial mail programs use different protocols to ex- 
change mail through local networks. However, these applications 
\xsc £fciteways to transfer mail across the Internet; larger Intranets 
use gateways to move mail between LANs. These gateways are usu- 
ally stand-alone computers that transfer the message from the pro- 
prietary mail protocol into SMTP. Gateways represent another hop 
in your messages’ journey to their destinations. 

The Post-Office Protocol 

The Post-Office Protocol (POP) is another standard protocol like 
SMTP. Whereas SMTP is designed to package messages and move 
them out along the Internet, POP provides a mediiun for users to 
download mail to a local computer from an SMTP server. Many 
email clients for the Mac such as Eudora and Netscape Navigator, 
as well as Windows, incorporate POP service. 

Once again revisiting the post office analogy, a POPmail client is 
similar to a post office box. If you’re used to getting yom mail at 
the post office, a post office box is a means of obtaining mail when 
the office is closed. SimUarly, it may be expensive or prohibitive for 
you to keep your personal computer running all the time to accept 
messages. POP is a means of querying an SMTP host and then 
downloading the messages you have received to your computer. A 
diagram of this process is shown in Figure 11.1. 

Mail clients that use POP provide ready access to the SMTP server 
without the hassle of remotely connecting to the server throu gh a 
Telnet session. There is a popular POP server application that runs 
on Unix machines; in these cases, using a POP-aware mail client, 
often referred to as a POPmail client, enables you to retrieve your 
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mail without having to Telnet or remotely log on to the Unix 
workstation. Similarly, the Mac makes an excellent POPmail server 
platform. 





Figure 11.1 Desktop computers send und retrieve email via SMTP 
through interaction with POPmail servers. 



One advantage to the POPmail system is that users are primarily 
responsible for managing their mail traffic. Unlike strict SMTP mail 
systems where messages collect on the server ad nauseam, POPmail 
systems enable users to download their messages to their personal 
computers. You therefore will not need an inordinate amount of 
disk space to store users’ mail on your POPmail server because it’s 
downloaded on a continual basis. Hence, an older Mac with a 
modestly sized hard drive will make an ideal POPmail server. 



Commercial Email Servers 

The emphasis of this chapter will be on POPmail servers and cli- 
ents. POPmail has many advantages as an Intranet mail system. 
However, there are several commercial alternatives to POPmail 
upon which you may want to base your Intranet mail services. With 
commercial email packages, you are locking yourself in to more 
than just a mail client. These applications also use proprietary mail 
formats to communicate between the server and the client. Some of 
the major commercial email systems are discussed briefly here. 

CE QuickMail 

CE Software’s QuickMail, having been available for several years, 
is one of the oldest Macintosh email systems. The latest version of 
QuickMail, version 3.5, offers such features as drag-and-drop 
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message creation, attachment handling, and a sophisticated message 
rules definition. The message rules enable you to deflect incoming 
messages into different folders based on the information in the 
various mail headers. For example, you could have all mail from 
joe@anyplace.com that contains the subject Financial Data relegat- 
ed to a folder entitled Joe’s Financial Data. 

Execution of these rules is the responsibility of the QuickMail serv- 
er; this capability requires a fair amount of server RAM. The client 
requirements are fairly modest and QuickMail caters to both Macs 
and PCs. 



Quarterdeck Mail 

Quarterdeck Mail has a long and tortuous history. Quarterdeck 
Mail was formerly known as Microsoft Mail, which was an original 
part of Microsoft Office. As a result. Quarterdeck Mail works with- 
in several Microsoft applications such as Word and Excel. As with 
QuickMail, you can run the server application on a Mac. Mac users 
of Quarterdeck Mail can exchange mail with Windows users using a 
separate gateway application. 

Lotus cc:Mail 

Lotus cc:Mail is yet another cross-platform mail application. In 
contrast to the other applications, there is no server available for 
the Mac, so you will need an Intel-based PC to run the post office. 
cc:Mail is quite popular within corporate Intranets. However, the 
mail protocol is proprietary; so like the other commercial systems, 
it is difficult to read your mail with alternate mail clients. 

cc:Mail offers sophisdcated rules execution much like QuickMail. 
Because cc:Mail was developed primarily under Windows, the Mac 
client has historically trailed behind in terms of features and 
performance. One advantage to cc:Mail is its integration into 
applications such as Lotus Notes. 
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Using Apple Internet Mail Server (AIMS) 

Setting up POPmail on your Intranet has many advantages over 
commercial mail systems. POP is an open and standardized proto- 
col; even though you may be running a certain type of POPmail 
server, your users can operate a variety of POPmail clients such as 
Claris Emailer, Eudora, or even Netscape Navigator. POPmail serv- 
ers are usually free, and the clients are likewise inexpensive. As POP 
works with SMTP, there is no need for a special gateway to the 
Internet as is the case with some commercial mail systems. 

One popular POPmail server for the Mac is Apple Internet Mail 
Server (AIMS). Formerly released as MailShare, AIMS has been 
acquired and is now distributed by Apple. In addition to working 
with POP and SMTP, AIMS supports many advanced features in 
conjunction with POPmail clients like Eudora. 

Currendy, AIMS 1. 1 is in beta testing, so AIMS 1.0 will be covered 
in this section. The chief difference between the two versions is that 
AIMS 1.1 is Open Transport-compliant. This means that your mail 
server will not be subject to the 64-stream limit imposed by 
MacTCP. For high-volume mail systems, this can prove significant. 

Installing and Launching AIMS 

AIMS is available on this book’s CD-ROM. To install AIMS, sim- 
ply drag the application over to a suitably located folder on your 
hard drive. In order to run AIMS, you’ll need to be running Sys- 
tem 7.0 or later and MacTCP 1.1.1 or later; however, the latest OS 
and MacTCP versions are highly recommended. 

As powerful as AIMS may be as a POPmail server, it is surprisingly 
simple to configure. Let’s start by double-clicking the AIMS appli- 
cation icon. Upon startup, AIMS will attempt to find out the node 
name of the host computer. You can see this happening as the De- 
bug wdndow opens on startup; a typical Debug wdndow is shown in 
Figure 11.2. The Debug window gives you a record of your AIMS 
transactions. You have other logging options within AIMS, but the 
Debug window enables you to view the status of the server as well 







324 



Biiilding and Maintaining an Intranet with the Macintosh 



as possible error codes. Furthermore, you can record the Debug 
window contents to a file using the Capture to file option under 
the Debug menu. 




Figure 11.2 The AIMS Debu 0 window enables you to keep tabs on 
your POPmail server. You can even record the contents of the 
Debupi window to a file for further inspection. 



Setting AIMS Preferences 

You can configure some of the AIMS connection and configuration 
preferences using the Preferences option under the Server menu. 
The Preferences dialog box will be similar to Figure 11.3. 

AIMS offers three types of services: POPS, SMTP, and Password 
services. POPS, also defined as an Internet standard, is supported 
by AIMS and Eudora. Because your server also handles incoming 
and outgoing SMTP traffic, you can configure die number of con- 
nections required. The Passwwd service enables users operating 
mail clients like Eudora to alter their passwords without having to 
bug you. 

MacTCP enables you to maintain 64 simultaneous IP connections 
or streams. These streams convey all types of Internet traffic, 
including Web and FTP transactions. AIMS gives you the ability to 
reserve some of those streams for your mail server operations. Keep 
in mind that AIMS 1.1 and later versions will be Open Transport- 
compliant; the number of streams available to your Intranet appli- 
cations will be limited only by your processor and RAM availability. 
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Preference! 
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Figure 11 .3 AIMS allows you to set many options re£iardin£i your 
AIMS services, stub as IP connectivity and mail server definition. 



As seen in Figure 11.3, you can reserve a number of your server 
streams to the various AIMS servers; furthermore, you can config- 
ure the timeout allowances (in seconds). POPS connections are 
established when your users check or download mail from your 
server. SMTP connections are established with remote hosts for the 
purposes of sending or accepting mail via SMTP. The Password 
server enables users to change their passwords without your in- 
volvement. This service requires a special IP stream just like your 
other services. 



— ^ 

NOTE ^ If you want to deny a service, such as password modification, just 
w set the number of connections to zero. 

There’s no formula that you can use to determine the number of 
connections you need for your Intranet. Generally, the larger your 
user base, the more simultaneous connections you’ll need to re- 
serve for AIMS. Your POP traffic will likely be pretty constant; mail 
clients are often configured to periodically check the mail server for 
new^ mail. I have my copy of Eudora checking my POP server every 
five minutes. If hundreds of users have their mail clients pop on to 
your server every few^ minutes, you’ll have to reserve a larger num- 
ber of connections. 
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Moreover, if you assign more connections, you'll need to reserve 
more RAM for AIMS. Nominally, the application needs a minimum 
of 1 MB, but you'll have to increase that if you want to serve 
more users. 

There are other preferences you can set within this dialog box. 

Of the SMTP connections reserved for AIMS, you can set the 
maximum number of outgoing SMTP connections. AIMS stores 
outgoing messages in a queue; the more connections reserved for 
outgoing mail messages, die smaller this queue will generally 
become. 

You can set the number of DNR cache entries within this dialog box. 
Both MacTCP and OT use a domain name resolver (DNR) diat 
allows Internet applications to transfer IP addresses, such as 
www.anyplace.com, to a more readily accessible format. Even though 
the process takes little time, AIMS circumvents tiiis lookup by 
cacliing the most frequently used domain addresses used by your site. 
This caching reduces the load on your domain name server. 

For more information about how your Intranet services use do- 
main name services, see Chapter 12, “Providing Domain Name 
Sen/ice." 

By altering the size of your Move buffer, you can optimize AIMS’ 
management of large mail files. Frequently, your users may want to 
send attachments over the Internet. These attached files can consist 
of MS Word files, graphic images, spreadsheets, or any other docu- 
ment. Such attachments can be large and are included in your mail 
message; increasing the size of your Move buffer in the Preferences 
dialog box optimizes handling of such large messages. 

We’ll talk about the AIMS mail and error logs later in this section; 
these logs allow you to review various server status messages. How- 
ever, AIMS performance decreases when the size of the logs be- 
comes large. For this reason, you can configure the maximum size 
of these logs in the Preferences dialog box. Wlien the logs reach 
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this predetermined size, AIMS throws away old messages, thereby 
reducing the log file sizes. You’ll have to set the log file size after 
observing AIMS’ performance after some time. 

Finally, you can configure the server addresses to which AIMS will 
respond. For example, your mail server may have the address 
mail.anyplace.com. Therefore, Joe Smith may receive mail using the 
hypothetical address joe.smith@mail.anyplace.com. For the sake of 
simplicity, Joe may want to have his mail sent to the more abbrevi- 
ated address, joe.smith@anyplace.com. You can enable this by en- 
tering the different server addresses to which AIMS will respond. 

As soon as AIMS is launched, it will look up the server address. You 
can enter additional names by which you want the server to be 
known in the Server Names box. You also can redefine a different 
default server address. By entering anyplace.com into the Server 
Names box, you allow users to accept mail with the same account 
name using that abbreviated address. 

Adding and Deleting Users 

Now that you’ve configured AIMS to your specifications, it’s time 
to start adding users to your server. Go up to the Server menu and 
choose Account information. A dialog box similar to that shown in 
Figure 11.4 should appear. There should already be two users de- 
fined: <any-namc> and Postmaster. The account <any-name> is 
like a dead-letter office for your mail server. Mail addressed to your 
server with an incorrect user name will be forwarded to this user 
account. Normal mailers bounce the misaddressed mail back to the 
sender, but AIMS allows you to retrieve and possibly respond to 
the sender. The Postmaster account has more privileges than other 
user accounts. Furthermore, this account is somewhat of a standard 
on the Internet. For example, if you needed to get a mail address of 
someone you know who works at UFaxIt software, you could take 
a guess by sending mail to postmaster@ufaxit.com. The chances are 
good that UFaxIt’s mail server similarly has a default account 
named Postmaster. This account is useful in that your server may 
have successive administrators as personnel turns over. The 
Postmaster account is not fixed to one person and can be accessed 
by the relevant user. 
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Figure 1 1 .4 AIMS allows you to add mail users and also to set 
various options for each user. 



To enter a new user, enter the user’s account name, a password, 
and their real name in the upper- right fields of the User Account 
dialog box. You also can set the maximum size of the user’s mail- 
box file on the server. This prevents a huge amount of mail from 
accumulating in the user’s server partition. 



— ^ 

NOTE , Typical precautions should be made in selecting the user's Pass- 
'S? word. One practice is to assign a password that is the same as the 
user's account name. This is frequently done and is therefore a 
security risk if the user does not immediately change his or her 
password. A safe means of assigning passwords is to create an 
obscure alphanumeric combination and relay that to the user, 
either personally or via a phone call. Do not send the password in 
a mail message. 



You also have several options to assign to each user account: Ac- 
count enabled. Login enabled. Require APOP, and Master Pri\'ileg- 
es. By checking a user’s Account enabled and Login enabled boxes, 
you allow the server to accept that user’s mail and you allow that 
user to retrieve mail with a POPmail client. Depending on the for- 
warding options we’ll discuss in Table 11.1, you may want to leave 
one of those boxes unchecked. 

APOP is a protocol that provides more password security than 
straight POP. This option should be checked if your Intranet mail 
clients support APOP as does Eudora. As of yet, AIMS does not 
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have a remote administration package; when one becomes available, 
a user with Master privileges will be able to perform sophisticated 
administration from a remote site. 

AIMS allows you several options in forwarding users’ email. Click 
on the Forwarding popup menu to see these options (outlined 
below). 



Table 11.1 AIMS Mail Forwarding Options 



Forwarding Option 


Description 


No forwarding 


Default option that lets mail accumulate on 
server for retrieval by user. 


Forward to 


Forwards mail to user. The address can be on 
the server or on another host. 


Save as archive 


Saves mail in a file using a Unix/Eudora for- 
mat. File name is entered in text field below. 


NotifyMail to 


Sends message to NotifyMail client. Client’s 
address is entered in text field below. 


NotifyMail to last IP 


Same as above except that the message is sent 
the last IP address from which the user 
checked their mail. 


Mailing List 


Sends mail to a mailing list. Location of text 
file containing mail addresses is entered in the 
text field below. 




NotifyMail is a Mac extension that listens for a message from a 
POP server. When NotifyMail receives this message, an alert is 
sounded and the user is notified that mail is waiting to be retrieved 
on the server. NotifyMail works even when the POPmail client is 
not active. NotifyMail is available on this book’s CD-ROM. 



When you have the user configured correctly, click the Save button 
and the user information is stored. Similarly, you can remove users 
by highlighting their names and clicking the Remove button. You 
can remove any accoimt except for the Postmaster and the catch-all 
<any-name>. 
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Routing Mail through Other Hosts 

You may have occasions to route your mail through other hosts. 

For example, if your mail server is part of a larger Intranet, your 
company may want to route all mail to the Internet via a single 
location for logging purposes. Most sites will not use this feature, 
but it’ll be discussed here just in case. 

Click on the Server menu and choose the Sending setup option. A 
dialog box will appear that is similar to Figure 1 1.5. You enter the 
domains you want to remap into the Domain field; the asterisk (*) 
is a wildcard character and wall match anything. By entering only an 
asterisk in the field, you will match all possible domains expressed 
in the users’ mail messages. 




Figure 1 1 .5 AIMS allows you to route mail from your server 
throu£fh another host using the Sending setup option. 

You can route the messages either through another host or to a file. 
By selecting Via host from die Route popup menu, you tell AIMS 
to route mail to the address that you enter in the subsequent text 
field. By selecting Save as files, you will be able to save these mes- 
sages into the file at die location you enter in the subsequent text 
field. 

Also in this dialog box is inforniadon regarding how mail should be 
sent from the server. These fields are the only pieces of information 
typically altered by the administrator. You can set the timeout, re- 
try, and message expiration limits. 

The AIMS Outgoing Message Log 

As wath any major Intranet service, you’ll want to have tools to 
troubleshoot and diagnose problems. AIMS provides several such 
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logging tools. The Debug window was introduced at the beginning 
of this chapter; the other logging tools include the Outgoing Mail, 
Mail, Error logs and the Connection Statistics window. 

An example of the Outgoing Mail log is shown in Figure 11.6. This 
window lists those messages that have not been delivered for some 
reason. If the recipient’s mail server is down, AIMS will periodically 
try to resend the message; this retry period is set in the Sending 
setup dialog box. For each outgoing message, this dialog box lists 
the addressee, the size of the message, the time it arrived back at 
your server, and the time that AIMS will retry to send the message. 



U l^jcMrv | 















Figure 11.6 The Outgoing Mail window allows you to monitor 
those messages waiting in the out£foin£j queue. 



The AIMS Mail Log 

The AIMS mail log gives you a record of all mail moving in and 
out of your server. As shown in Figure 1 1.7, the Mail log contains 
information about who sent the message, to whom it was ad- 
dressed, the size of the message, and the date it was sent or re- 
ceived. As seen in the figure, the sender’s address is on the same 
line as from in the Kind column; the addressee is on tlie same line 
as to. If the message was sent successfully, the addressee is listed on 
an additional line along with the message size, the keyword sent, 
and the date of transmission. 




Figure 1 1 .7 The AIMS mail lo^^ivesyou information on 
which mail comes in and£foes out of your server. 
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The AIMS Error Log 

An example of the AIMS error log is shown in Figure 11.8. In ad- 
dition to the mail server startup and shutdown times, AIMS 
records error messages in this log. Some of the causes that result in 
error messages include the following: a failure to startup MacTCP, 
the SMTP connection timed out, the addressee’s domain is not 
recognized, and so on. These error messages are fairly self- 
explanatory. 




Figure 11.8 The AIMS error lo£f can help you determine reasons 
why certain messages were not transmitted. 



Monitoring AIMS Connection Statistics 

One useful tool is die Connection Statistics window, which tells you 
how many current POP, SMTP, and Password connections are active 
with your server. These numbers are compared with the maximum 
values that you set in the AIMS Preferences and can be used to 
determine whether your maximum values are set too low or too high. 
A sample Connection Statistics window is shown in Figure 11.9. 



Connection Stotlstlcs 




Curr«nt M«x«twn 


porasww: 


0 0 


SMTFS*rv#r; 


0 0 


pMnrord S«rv«r - 


0 0 


SMTP Out^Ding ; 


0 OS 



Figure 1 1 .9 Using the Connection Statistics window^ you can see 
how your traffic compares to the limits yoiTve set in the AIMS Pref- 
erences dialog box. 
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POPmail Clients 

It’s time to look at the other end of your Intranet email services — 
your POPmail client. The advantage of basing your email system on 
an open standard like POP is that you have a choice of mail clients 
to distribute to your users. 



Eudora 

Eudora is one of the oldest POPmail clients for the Mac. Originally 
developed by Steve Dorner as a freeware mail reader, now Qual- 
comm Inc. supports and distributes both freeware and commercial 
versions of Eudora. Eudora Lite is freely distributed as both a Mac 
and Windows POPmail client. Eudora Lite enables you to connect 
to a POPS server, retrieve and send email. Eudora Pro has the same 
capabilities as Eudora Lite and then some. For example, you can 
filter messages based on the message header or mail contents. 

These messages can be redirected into a series of mail folders. 
Moreover, Eudora Pro comes with different encryption methods 
including MIME, BinHex, and uuencode; Eudora Lite works only 
with BinHex. The uuencode encryption works with Unix mail pro- 
grams as well as Mac/PC mailers. Figure II. 10 shows a typical mail 
message viewed with Eudora Pro. 



; (LJ- 




To: too 

From: tobin^ipobo* .coo (Tobin C. Anthony) 
Subject: What’s going on otth the numbers? 
Cc: 

Bcc: 

Attochoents: 


□ 


Tom 

Hove you seen the latest results? What’s going on? The coopany’s going to go 
bankrupt if «e don't get out and start sellingl I vant results soon or you're 
outta herell 

Tobin 

1 


i 

□ 



Figure 11.10 Eudora Pro is a popular and functional 
POPmail application. 
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NOTE ^ Eudora Lite is extremely popular with Mac and Windows users 
w and is often distributed to customers of Internet service providers. 
If you are looking to reduce your Intranet software costs, you can 
always distribute Eudora Lite to those users who won't necessarily 
make use of the advanced capabilities of Eudora Pro. 



Netscape Navigator 

It’s hard to picture what the Web would be like without Netscape 
Navigator. In addition to using it to browse the Web, you can actu- 
ally use it as a POPmail client. Figure 1 1. 1 1 shows a message being 
sent with Navigator. Although Navigator doesn’t have quite die 
funcdonality that Eudora has, it’s dghdy integrated with the brows- 
ing environment. As a result, it’s a snap to email Web pages, URLs, 
or files to anyone down the hall or through the Internet. Chances 
are that Navigator is liberally distributed throughout your Intranet 
an>^vay; many large companies with substantial Intranets have pur- 
chased site licenses of the application. As a result, many of your 
users may already have a useful POPmail client on their desktops. 



= 38^^^^:=^ Metfoge CompotHion di' 




Figure 11.11 In addition to browsing the Web, Netscape Naviga- 
tor allows you to send and receive mail via POP. Note the attached 
file included in this message. 
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Claris Emailer 

Claris Emailer is a relative newcomer to the POPmail scene, but it 
is loaded with features. You can use Emailer to send and receive 
mail through POP as well as most of die online services such as 
America Online, CompuServe, and Prodigy. Emailer allows you to 
store all your message in one address book regardless of which mail 
server or online service you use. In addition to MIME support, 
Emailer allows you to Stuff your attachments with Aladdin Systems’ 
Stufflt technology. Emailer has become a popular email program 
for Mac users on the Internet, but it’s utility as an Intranet applica- 
tion is hampered by its lack of a Windows version. Figure 11.12 
shows a typical message composed in Claris Emailer. 




Figure 11.12 Claris Emailer allows you to use email via POP, 
America Online^ CompuServe^ and other systems — all with one 
package. 
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Administering Your Email Service 

Well, you have the tools in place. You have the server and you’ve 
distributed your email clients. You’ve got AIMS up and running 
and you’re watching the mail log fill up with messages that are the 
lifeblood of your Intranet, if not your entire company. Let’s cover 
some administration tips so you can make your service that much 
more efficient and reliable. 

Backing Up Your Server 

As is the case with all computers, regular backups are essential. In 
some sense, POPmail users are less affected by server crashes, 
because their mail is downloaded periodically to their desktop 
computers. However, for users who are unable to check their mail 
for a few days, a server crash will eliminate the stored mail; so the 
users won’t be able to retrieve that mail. 

Daily backups would go a long way to ensure that these messages 
would never be lost forever. Weekly backups are almost as good, 
but you have less chance of retaining a slew of unread messages. 

You will want to back up all your different Intranet servers, but 
you’ll need to pay special care to your email server. No other loss of 
data is going to elicit a mass riot among your users like the loss of a 
few days’ worth of mail. 

Providing Enough File Space 

Most text-based email messages take up 3-5 KB of file space. Let’s 
assume that a user will receive an average of 20 messages each day. 
Let’s assume that two of those messages include a 100 KB file. At 
the worst case, each user therefore accumulates roughly 300 KB of 
mail each day. That means that this average user accumulates 3 MB 
of mail over a ten-day period; this is the length of time that a user 
will be gone on a week’s vacation from the office. To prepare for 
worst-case disk usage, you’ll need to allot around 3 MB of disk 
space for each user. This is not as bad as it seems with disk space 
running for 30 cents/megabyte. Each user’s mail will cost you a 
dollar in disk space. You can easily store mail for 300 users on a 
1 GB drive. Remember that your usage conditions may be differ- 
ent, so your mileage may vary. 
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Using Mailing Lists 

Another service that you can offer on your Intranet is mailin^f lists. 
A mailing list was discussed previously in this chapter in the section 
“Adding and deleting users” in conjunction with the AIMS soft- 
ware. For the uninitiated, a mailing list allows users to blast email 
to many other users by directing mail towards a single address. 
Hence, mail directed to project_x@anyplace.com can be re-directed 
to multiple users; these users can be within die same domain or 
elsewhere out on the Internet. 




AIMS and other mail servers offer a rudimentary mailing list capa- 
bility, but software that manages stand-alone mailing lists offers 
users more functionality. 



There are thousands of mailing lists circulating on the Internet. 
Discussion on these lists usually pertains to a certain topic; mailings 
on these lists arc cither moderated by a list manager or unmoderat- 
ed allowing any list members to post whatever they want. Mailing 
lists are one step below Usenet newsgroups on the Internet food 
chain; many newsgroups started out as mailing lists. 



Unlike newsgroups that are distributed by news servers throughout 
the Internet, mailing lists arc operated through a central mail server 
usually operated by the list manager. Nowadays, sophisticated soft- 
ware is used to manage mailing lists that enables users to subscribe 
or unsubscribe to the list without assistance from the list manager. 
There arc other sophisticated features found in modern mailing lists 
that will be discussed later in the section dealing with Maejordomo, 
a mailing list manager for the Mac. 



NOTE 






Nothing irritates folks on the Net more than getting spammed. 
Spamming occurs when someone sends mail to a mailing list or 
newsgroup that is totally unrelated to the list or group charter. 
These postings are usually in the form of gratuitous articles or 
advertisements. For this reason, many Internet mailing lists accept 
postings only from list members. 
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Mailing List Uses for Your Intranet 

The focus of this section will be on the use of mailing lists for your 
Intranet. If your organization is quite large, you may have groups 
of Intranet users who want to correspond with one another on a 
particular topic. You can use your Intranet email server to manage 
several different mailing lists. Let’s talk about some potential uses 
for mailing lists within your organization. 



Centralized Information Distribution 

You or your management may want to distribute information via a 
mailing list. Information on this type of list would only be distrib- 
uted from a centralized point. You or your bosses would be able 
to send mail to the mailing list address and have it distributed 
throughout your organization. You could restrict the list so that no 
other user could distribute mail through the list. Topics on this list 
could include memoranda, announcements, or policy directives. 

Project-Specific Mailing Lists 

If your Intranet consists of many different users, you can set up 
mailing lists similar to those circulating on the Internet. Members 
of projects or special interest groups can distribute information by 
using project-specific mailing lists. Messages could be sent by any 
member on the list to all the members on the list. 



Special-Interest Mailing Lists 

Similar to project-specific mailing lists, you may want to allow 
your users to set up lists that also include members outside your 
organization. You may want to have a mailing list relating to devel- 
opments within your particular industry. For example, if your com- 
pany is in the programming business, you may want to sponsor lists 
pertaining to topics that are not covered on conventional Usenet 
groups or other mailing lists. One drawback of this type of mailing 
list is that you are now drawing a good deal of attention to your 
Intranet. You cannot run a security check on each and every 
member of your list, so you are exposing your users to attention 
from people outside your organization. Sponsoring this type of 
mailing list could be a particularly bad idea if your company or 
group requires a high level of security. 






Chapter 11 Email Services 



339 



Using Macjordomo 

Macjordomo is a Mac-based mailing list server. The application’s 
name is a play on the name of a famous and popular Unix list server 
known as Majordomo. Michele Fuortes, the program’s author, 
insists that Macjordomo is not a Mac port of the popular Unix 
application and the applications only share a common name and 
function. 

Macjordomo will work with any Mac- or Unix-based mail system, 
but it’s specially configured to work with AIMS. Other than Mac- 
jordomo and an email server, you need only a POP address for each 
list you want to maintain and a POP administration address. This 
administration address is used by list members to subscribe and 
unsubscribe from the list. Because we’ve already discussed AIMS in 
this chapter, we’ll concentrate on using Macjordomo in 
conjunction with AIMS. 



Installing Macjordomo 




Drag the Macjordomo folder from this book’s CD-ROM to a spot 
on your hard drive. Macjordomo docs not need to be in the same 
folder as AIMS. Double-click on the Macjordomo icon to launch 
the application. 



Configuring AIMS to Serve Mailing Lists 

As discussed in the section “Adding and Deleting Users,” AIMS 
already supports routing mail through mailing lists. These mailing 
lists are stadc and require setup by the administrator. AIMS reads 
the file of mail addresses specified in the Account Information dia- 
log box. Unlike conventional mailing lists, users have neither the 
authority nor the means to add or remove themselves from these 
mailing lists. To work with Macjordomo, you’ll need to set up 
AIMS mailing list accounts. 

If it isn’t already open, launch the AIMS application. Within the 
Account Information dialog box, create one account for every list 
that you want to maintain. Let’s create a list for workers involved 
with Project X. We’ll call the list project_x and give it the password 
px096. Enter these in the text fields in the dialog box. 
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Create another list for list members to use to send commands to 
the list server. Let’s give this account the name maejordomo and 
the password mac032. Finally, let’s create an administrative account 
to which users can contact you, or the list administrator, with ques- 
tions on the mailing hst. We’ll call this account listmom and give it 
the password momSOl. The passwords are arbitrary but need to 
correspond to those used in Maejordomo. 

Entering Mailing List Administration Data 

Go back to Maejordomo, cUck on the Lists menu and drag down 
to Subscription List. A window will appear, as shown in figure 
11.13. In the POP Address field, enter the subscription address; 
we have defined that to be maejordomo, so enter that name with 
the appropriate domain name. In this example, the domain is 
mail.anywhere.com, so enter macjordomo@mail.anywhere.com 
in the POP Address field. In the POP Password field, enter the 
corresponding password that you defined as mac032. For the 
SMTP field, enter the domain name of the POP server, 
mail.anywhere.com. If you did not want to use the AIMS POP 
server, you could enter another address; that mail server would 
have to be configured to accept mail from your mailing lists. For 
the Problems To field, enter listmom@anyplace.com as we defined 
earlier. Click the Accept Users Command button to allow subscrip- 
tions and list commands to be entered by users. Finally, in the Sub- 
scription Interval field, enter the period that you want mail to be 
checked in. 




Figure 11.13 Maejordomo allows you to define the list adminis- 
trator and subscription list addresses. Users will use these addresses 
to subscribe or unsubscribe to the list or send mail to the list’s 
administrator. 
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Creating New Mailing Lists 

Now that you have the administrative information entered, it’s time 
to create new mailing lists. Click on the Lists menu and select New 
Lists. You’ll be greeted with a window similar to that shown in 
Figure 11.14. In this window, you’ll create the specifications for 
each list. 



ListNim* : 




II 








List MSntt : 


1 pro jeoUj(9nun ^ vber * ocm 


... 


POP Password 


l“~* .. 1 


S Subscriber Onig 


SMTP Server: 


ImtH^wbereoom 


Dtlst is Active 


Problems To : 


1 Kstmom^mafl^ wher*.eom 




Repig To : 


(8) List 0 Original Sender 


□ Read Onig 


Repig Address : 


1 pro|eet-x9mal1 .ang vber* .com 


J 








Digest rom* ; 


|project-x_digest 


1 1 1 



DVjtit kiUrval : (§) Tim* (dayi) ; |t | O Ste* 

Strvhq httrval (mta) : | 1o| □ Hid* LW 

(S) Aeocpt oomm«nds O subscription* O all co mmands 



[ Uters... ] [ Saue ] 



Figure 11.14 Macjordomo allows you to configure many of the 
subscriber options available for a particular list. 



Enter the list name and list address in the respective text fields. As 
we decided on the list name project_x, enter that into the List 
Name field and append the server name to the list name, 
project_x@mail.anywhere.com, to insert into the List Address 
field. We decided on a list password of px096, so insert that into 
the POP Password field. Enter the POP server address, 
mail.anywhere.com, into the POP server address. For problems 
with this particular list, enter the address to which people should 
send mail; in this example, enter listmom@mail.anywhere.com. 

Clicking on the Subscriber Only button enables only members of 
the list to be able to send mail through the list. This is useful in 
restricting unwanted mass mailings to your list. Clicking on the List 
is Active box activates the list. 

Okay, here’s where things get a little dicey. When using a package 
like Eudora, the message header consists of several fields. There are 
the To and From fields, which are self-explanatory; these detail the 
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addresses of the email author and recipient. You’ll also see the CC 
field and sometimes even a BCC field. These stand for carbon copy 
and blind carbon copy. Blind carbon copy recipients don’t see any 
other names in the message header except for the author and the 
recipient. When receiving email from mailing lists, you’ll see an 
extra field in your email messages entitled Reply To. The Reply To 
field contains the address to which the reply to the mail should be 
addressed. 

The next few fields deal with how Reply To directs list messages. 

By clicking on the List button in the Reply To field, you are redi- 
recting message replies to the entire list. For example, if you check 
the List button, someone reading a list message will see the list 
address in the Reply field. If you check the Original Sender button, 
the message author’s address appears in the Reply To field; a re- 
sponse to this message will be directed to the author of the original 
email. 

In the Reply Address field, you can either put the list address or a 
different address. If you insert a different address in this field, you 
can moderate the list contents. Mail will get sent to the accoimt 
you specify; you can read and monitor the messages to regulate the 
content of the message postings. 

By clicking the Read Only box, you prohibit the list address from 
showing up anywhere within the message. You may want to do this 
to restrict information about the list. In this case, you won’t see the 
list address in the message’s Reply To field. Instead, you’ll see the 
address you’ve just entered in Maejordomo’s Reply Address field. 
This can be the list manager’s address or some other mail address. 

Especially with high-volume mail lists, users may not want to re- 
ceive mail message by message. Maejordomo can send the list mail 
in bulk. These bulk mailings are referred to as digests. Advantages 
of digests is that you only periodically receive one large message. 
The drawback is that the digest contains several different mail mes- 
sages, and replying to an individual email deep inside the digest is 
not easy. You often have to manually cut and paste the author’s 
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address into a new field. List members can request to receive their 
mail in digest form by using some of the list commands we’ll dis- 
cuss shordy. 

In any case, you can send messages by digest using Macjordomo. 
Simply enter a name for the digest in the Digest Name field; we’ll 
use project_x_digest. Click on the Digest button to determine the 
location on your hard drive where you want to store the digest 
messages before they are sent out. Finally, you can specify whether 
you want to send the digest on a regular basis (that is, after a cer- 
tain number of days) or when the digest file reaches a certain size. 
There are merits to both options, but you can choose only one. 

You’re almost finished configuring your first list, so hang in there. 
In the Serving Interval box, enter the amount of time that you 
want to send the list messages. Keep in mind that serving these 
messages generates a lot of SMTP traffic. You’ll have to pick a time 
that works well with the list volume you expect. 

Finally, the advantage of mailing lists through an application like 
Macjordomo is that your users can configure their list mail the way 
they want it. . .all without bothering you, the administrator. We’ll 
talk more about the mailing list commands at your users’ disposal 
in the following section, but it suffices to say that there are several 
commands that your users can embed in messages to the sub- 
scription address (in our example, this is macjordomo@mail. 
anywhere.com). By clicking on the Accept Commands button, you 
can allow users to use these commands to modify their personal list 
preferences. Similarly, you can refuse new subscriptions and any 
other command by using those respective buttons. 

Modifying User Privileges 

Okay, you’ve finished configuring the list. Now it’s just a matter of 
getting users to join the list. Users can subscribe to the list them- 
selves or you can create the user accounts yourself. To create new 
users, or to add yourself to the list, click on the Users button at the 
bottom of the dialog box. You will be greeted by a dialog box simi- 
lar to that shown in Figure 11.15. 
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Figure 11.15 Macjordomo lets you add users or modify the privi- 
leges of those users who have subscribed to the list. 



If your list is new, there won’t be any users listed in the Subscribers 
field. Clicking on an existing name allows you to modify the user’s 
mail address, real name, or organization. Similarly, you can alter the 
user’s privileges by using some of the checkboxes shown in Figure 
11.15. Clicking cither the Messages or Digests buttons determines 
whether that user receives list mail via individual messages or by 
digest. 

Clicking on the Send Ackn check box tells Maejordomo to send an 
acknowledgment message to this user whenever he or she sends 
mail to the list. Clicking the Inactive check box suspends the user’s 
subscription. List members can ask Maejordomo to send them the 
names and address of all subscribers; clicking the Conceal check 
box hides the user’s name from that list. Finally, users often see 
their own mail to the list sent back to them. Clicking the No Self 
Messages check box prevents users from having their messages sent 
back to them. 

You can import or export users fi’om text files by using the Import 
and Export buttons. The user names and addresses are stored in 
these files, which can be then exported to other POPservers for use 
with static AIMS mailing lists. You also can delete users by using 
the Delete button. Adding users is accomplished by clicking the 
New button; this brings on a dialog box, as shown in Figure 11.16. 
The fields are virtually identical to those shown in Figure 11.15 
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Figu re 1 1 . 1 6 Macjordomo allows you to manually enter subscrib- 
ers to your list . . . if you really want to do so. 

Macjordomo User Commands 

Congratulations! You’ve configured your first Macjordomo list. 
Repeat the above directions as necessary for each list you maintain. 
The advantage of maintaining a mailing list using Macjordomo, as 
opposed to a static mailing list through AIMS, is that your users 
have several commands at their disposal. The commands need to be 
sent in the body of a mail message that is directed at the Macjordo- 
mo subscription address (macjordomo@mail.anywhere.com in our 
previous example). All these commands return some sort of mes- 
sage to the user; this response is either a benign acknowledgment 
or a response to the user’s command. These commands are summa- 
rized below; the underlined portions of the commands are short- 
cuts to the commands: 

subs cribe list_name your_ subscribes user to list_name mailing list 
first_name your_last_name 

uns ubscribe list_name subscribes user to list_name mailing list 

Ust details all the lists served at ±is site 

review list_name returns a list of users currently sub- 

scribed to the list_namc mailing list 

help returns a help message describing these 

commands 
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get list_namc file^name 

inde x list_name 

search iist_name 
scarch_string 

info list_name 

set list_name option 

ack n 

noa ckn 

con ceal 

noconceal 

active 

inactive 

digest 

mai l 

repro 

nor epro 



retrieves file_name stored in digest 
folder 

returns list of files that can be retrieved 
using get 

searches files in digest folder for 
occurrence of scarch_string 

returns info on list (provided with the 
Edit Info command discussed below) 

option consists of the following list 
options 

returns acknowledgment when you send 
mail to the list 

no acknowledgment is sent [default] 

conceals your name and address from a 
review command 

opposite of conceal [default] 

activates your subscription [default] 

inactivates your subscription — different 
from unsubscribe 

request for list mail to be sent as digests 

request for list mail to be sent individu- 
ally [default] 

authors get copies of their own messages 

authors do not get copy of their own 
messages [default] 



Editing Response Info 

Maejordomo allows you to modify the response messages sent back 
to the user. Click on the Special menu and select either Edit Gener- 
ic Messages or Edit List Messages. You’ll be able to modify a vari- 
ety of the types of messages returned to the user, when making any 
of the requests mentioned in the previous section. In addition, 
Maejordomo keeps logs of the errors and mail transactions. You can 
view these logs by clicking on Special and selecting Show Log or 
Show Errors. 
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ListSTAR 

Macjordomo is an excellent solution for most of your simple mail- 
ing list needs. However, you may desire a more robust and config- 
urable mailing list capability. ListSTAR, distributed by StarNine 
Technologies (now a subsidiary of Quarterdeck Corp.) who also 
develops WebSTAR, allows you to offer sophisticated and highly 
customizable mailing list services that rival those offered by Unix 
mailing list server applications. ListSTAR actually comes in four 
different flavors; there’s a version tliat works with CE QuickMail, 
Quarterdeck Mail (formerly Microsoft Mail), SMTP, and POP. To 
keep with the tlieme of this chapter, we’ll look at ListSTAR/POP. 




ListSTAR/SMTP doubles as an SMTP server so you don't need to 
run ListSTAR in conjunction with a separate mail server as you do 
with the QuickMail, Quarterdeck Mail, and PQP versions. List- 
STAR/PQP allows you to operate over dial-up connections, but 
you need to configure POP accounts for ListSTAR. In contrast, 
ListSTAR/SMTP functions as a mail server, so you do not need 
separate mail accounts. 






When should you use ListSTAR over Macjordomo? Both applica- 
tions give mailing list users a great deal of capability to customize 
their personal mailing list preferences. However, ListSTAR uses 
sophisticated rules that can be configured to provide a variety of 
services to users. You can respond to a request based on text 
contained in a mail header; while Macjordomo gives you a set of 
predefined responses to return to the user, ListSTAR allows you to 
customize the types of mail actions. Furthermore, ListSTAR can 
run AppleScripts that can execute sophisticated functions. 

For example, the AutoResponder script directs ListSTAR to mail 
the files to mailing list subscribers. The user fills in responses on a 
form generated by the script; ListSTAR interprets these responses 
and, through Apple events, mails the selected files back to the 
user. 



continues 
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ListSTAR also uses regular expressions to set up rules. Regular 
expressions are popular in many Unix applications and in text- 
processing software on other operating systems. With regular 
expressions, often referred to as regexps, you can establish search 
criteria that match characters, numbers, and other alphanumeric 
sequences. Regexps greatly expand your ability to set up rules to 
provide sophisticated user services. 

As Macjordomo is offered as freeware, you get a lot of bang for 
no bucks. However, if you want to offer more sophisticated mail- 
ing list capabilities, you may want to pony up the extra cash for 
ListSTAR. 



ListSTAR Rules and Services 

The flexibility that you get from ListSTAR comes at the cost of a 
complicated user interface. The ListSTAR documentation is com- 
prised of over 130 pages of Adobe Acrobat documentation. I can’t 
hope, nor it is my intention, to reproduce die documentadon here 
in this chapter; however, I would like to give you a flavor for how 
mailing list services can be constructed using ListSTAR. 

Double-click on die ListSTAR Server icon; you’ll see the ListSTAR 
services window appear, as shown in figure 1 1.17. A ListSTAR 
service is defined as a series of ListSTAR functions. A service could 
be a mailing list delivery, an email-on-demand service, an adminis- 
trative service, or some sort of specialized service tiiat you’ve con- 
cocted. ListSTAR services can be differentiated into two categories: 
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Figu re 11 . 1 7 The ListSTAR Services window contains all the dif- 

ferent mailin£i list services that you can offer. 
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□ Mailer services. These services process email requests and 
serve mail to list users. 

□ Timer services. These types of services occur at certain prede- 
termined times. An example of a timer service is one that 
combines a day’s wordi of list mail for compilation and distri- 
bution as a digest. Digests are mailed out to list members on a 
periodic, often daily, basis. Administrative services, such as 
message log purging or formatting, are also examples of timer 
services. 



Configuring Timer Services 

If you’ve installed ListSTAR correedy, you’ll see the list of available 
services, as shown in Figure 11.17. Let’s take a look at some of the 
administrative services already defined. Select the Administration 
entry in the Services window and select the Edit button (you also 
can double-click the entry to edit it). You should see a window like 
that displayed in Figure 11.18. This window allows you to edit the 
rules that define your administrative services. 
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Figure 11.18 Tott can editor define rules that comprise your ad- 
ministrative ListSTAR services. 
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Note that there are four default rules that comprise your adminis- 
trative ListSTAR services. Let’s work on the Log File Handling 
rule; clicking on this rule and clicking the Edit button brings up 
the rules editor, as shown in Figure 11.19. Note that you can cus- 
tomize four types of preferences for this rule: Timing, Admin, Mis- 
cellaneous, and Comment. By clicking on these preference icons at 
the left of the window, you can bring up the particular options for 
those topics. As the Administrative services are timer services, you 
are given the option as to when you want the rule to be executed. 
The timing preferences are shown in Figure 11.19. Note that you 
can set the time and frequency that the rule is executed. You can 
direct logging messages to a certain file, and you can even execute 
an AppleScript that you’ve created for a particular purpose. 



[ “Log File HttndUng” rule definition i 




Figure 11.19 Once in the rules editor^ you cun customize several of 
the rulers preferences. For timer servicesy the timing preference is the 
default entry in the editor. 



Figures 11.20 through 11.22 detail the options for configuring the 
administrative and miscellaneous rule configurations as well as a 
comment that you can install to describe the rule. Note that in the 
administrative configuration (see Figure 11.20), you can specify the 
actions that you’d like ListSTAR to perform. For example, you can 
clear various logs, such as message or error logs, and even have 
ListSTAR'send you email when this occurs. 
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-Log File Handling*' rule definition 
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Figure 1 1 .20 Ton can specify some miscellaneous rule preferences 
in this editor 



Note that in Figure 11.21, you can have an AppleScript executed 
when a rule is executed. 




Figu re 1 1 .2 1 Tou can specify some miscellaneous rule preferences 

in this editor 



Finally, you can install a comment to remind you why you created 
this rule. 
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Figure 1 1 .22 In case you fov£iet what this rule doeSy you can 
install comments in the editor to remind you. 

Configuring Mailer Services 

Let’s go back to the Services window (shown in Figure 1 1.17) to 
look at what’s involved configuring a Mailer ser\dce. Double-click 
on the Email-on-Demand Demo rule. Note that you have more 
options for editing Mailer service rules than you do when editing a 
Timing service (refer back to Figure 11.18). With a Mailer service, 
you are directing the ListSTAR to process some mailer function. 
Each Mailer service configured in ListSTAR requires its own POP 
account. The ListSTAR Server assumes that it has exclusive access 
to this account and deletes mail messages received into the account 
as it reads them. For this reason, you’ll have to define both a POP 
and SMTP account for the Mailer service, as shown in Figure 
11.23. 
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Figure 1 1 .23 Mailer services require POP and SMTP mail access. 



This particular Mailer service, included as a demo in the ListSTAR 
distribution, handles email on-demand. Tliis particular service is 
comprised of several rules as shown in Figure 11.24. These rules 
are actually activated in the order that they are listed in the figure — 
die top rule. Mailer Daemon Mail, is evaluated first in the se- 
quence. If the incoming mail message matches the rule conditions, 
referred to as triggers., die actions specified in the rule are carried 
out. If not, the next rule. Send Desired Recipes, is evaluated. 
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Figure 11.24 ListSTAR services can be comprised of several 
different rules. 
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Select the first rule and click on the Rules icon in the left-hand side 
of the window. This will bring up the display shown in Figure 
1 1 .25. The first two icons on the left-hand side of the window, 
Content and Address, represent the rule triggers. These triggers 
represent certain conditions which, in this example, are evaluated 
against both the content and tlie address of incoming messages. 
Incoming messages that match the trigger criteria cause certain 
actions to be taken. These actions are listed under the Reply and 
Mailing-List icons. 




Figure 1 1 .25 Tou can define both trij^gers and actions associated 
with various service rules. 



Finally, you can issue connection scripts that can be executed when 
the service logs in and out of the POP server. These scripts are just 
simple AppleScripts that execute predetermined tasks. You select 
the AppleScripts after selecting the Connection Scripts icon on the 
left, as shown in Figure 11.26. 

ListSTAR connection scripts can be used to dial in to and out of 
commercial Internet providers. Your Intranet will likely have a 
much faster and more direct connection between your ListSTAR 
server and your POP server, so you may not need to use connec- 
tion scripts in your services. 
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Figure 1 1 .26 ListSTAR allows you to execute AppleScripts when 
your services start up and also when they commence processing. 



Address Lists 

Now that you’ve seen how ListSTAR responds to certain tasks and 
mailing list requests, it’s time to take a brief look at how ListSTAR 
manages address lists. Clicking on Windows and selecting Address 
Lists brings up the window in Figure 1 1 .27. You can create and 
edit lists, add users, and get info on the lists themselves. This editor 
is very simple to use and is very similar to the method used by 
Macjordomo. 
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Figure 1 1 .27 ListSTAR provides an easy means of adding and 
editin£f mailin£f list user privileges. 
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Summary 

AIMS and Macjordomo, or AIMS and ListSTAR, provide a potent 
combination for you to use to manage your Intranet email services. 
Email will likely be the lifeblood of your Intranet. You’ll be able to 
supplement your email services with a mailing list capability. Mail- 
ing lists will allow your users to communicate with one another in 
an informal but effective manner. 

Macjordomo and ListSTAR represent two useful Intranet services. 
Much like the “lax-on-demand” that many companies have institut- 
ed for their customers, you can use these applications to offer an 
“Email-On-Demand” feature for your Intranet users. Not only can 
they use mailing lists to communicate with one another, they also 
can obtain specific information fi"om the mailing list server itself. 
Macjordomo offers a great deal of functionality for a fireeware ap- 
plication. ListSTAR, however, provides a powerful tool with which 
you can manage your Intranet mailing lists. Through the compre- 
hensive Mailer and Timer services, as well as AppleScript support, 
you can further customize your mailing list services to support your 
Intranet users. 

In the next chapter, we’ll talk about providing domain name service 
to your Intranet. If you want to look elsewhere, see these other 
chapters: 

□ Chapter 13, “Intranet Server Security,” to learn how you can 
configure hardware to provide secure transactions within your 
Intranet and out to the Internet. 

□ Chapter 14, “Sample Intranet Applications,” to learn about 
some services you can provide using the Web, FTP, and email 
technologies discussed in this book. 
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Links Related to This Chapter 


AIMS home page http://www.solutions.apple.com/ 
products/AIMS/default.html 


Qualcomm, Inc. 


http://www.qualcomm.com 


Netscape 


http://www.netscape.com 


Claris Emailer 


http ://www.claris.com 


Macjordomo 


http://leuca.med.cornell.edu/ 


StarNine 


http: //www.starnine.com 


Usenet 


comp.mail.eudora.mac 

comp.sys.mac.comm 
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Providing Domain Name Service 

Did you ever wonder what happens to an envelope when you drop 
it in the mailbox? Oh sure, you put a ZIP code on it and that does 
the trick, but what’s a ZIP code, an>^vay? It’s the same thing with 
using the speed-dial buttons on your telephone. You call your 
mother using a special button. It’s kind of like magic — every time 
you punch that same key, your mother answers. You probably don’t 
even remember her real phone number anymore. 

People are reaching die same sort of complacency when it comes to 
the Internet. Think about it. You put an address into a Web brows- 
er and lots of pictures and text appear. It’s the same thing with 
email. Sending mail to an address like steve@aol.com now seems 
familiar. Have you ever wondered how that works? I mean, how do 
mail and Web requests get to aol.com anyway? Now that you men- 
tion it, what does aol.com mean? 

One important part of the Internet is the Domain Name System 
(DNS). DNS is the structure that allows mail to be sent, Web 
browsers to work, and many other wonderful things as well. You’ll 
need to have access to domain name service not only to access the 
Internet, but also as a shortcut for users on your Intranet as well. 

Still too abstract? No problem, wee’ll cover the important parts of 
DNS one step at a time. These topics include the following: 

□ A brief introduction to Internet domains 

□ A brief introduction into how domain name servers work 




□ A look at domain name servers for the Mac 
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An Introduction to DNS 

Your computer’s domain name doesn’t mean much to other com- 
puters. When sending IP traffic, computers really care about your 
32-bit IP address. That’s the long numerical listing; that is, 
128.183.44.89. Computers are perfeedy happy to converse accord- 
ing to IP address. However, speed-dial buttons are put on your 
phone because you can store only so many numbers in your head at 
any given time. Similarly, you’re not going to be able to remember 
too many IP addresses. I’ve been using the Internet for years and I 
can only remember my Mac’s IP address and maybe my local do- 
main name server if I’m lucky. 

For this reason, the convention has been to apply mnemonic names 
that correspond with the IP addresses. It’s a lot easier to send mail 
to joe@abc.edu than to joe@128.83.102.31. Now you see the 
problem — you work with the alphabetic address, w hil e your comput- 
er likes the numbers. You need something or someone that will 
interpret for you. 

This is where the domain name server comes in handy. When your 
Web browser or email application sends out data with a particular 
host name, your computer needs to convert that host name to a 
particular IP address. This is a task that your computer usually does 
not handle on its own. With the millions of hosts on the Internet, 
your computer would take all day to send a simple mail message if 
it had to sort through an internal database each time. Think of how 
that would slow down Web browsing! 

Like the old saying goes, “It’s not what you know, but who you 
know.” Net hosts are the same way. Your computer, when trying to 
send a POPmail message or any other type of IP data, sends out a 
message through its domain name resolver (DNR). The DNR then 
sends a message to a domain name server. This domain server also 
doesn’t have a larger Internet host database, but it can deconstruct 
the host address. If it needs to do so, it can query other domain 
name servers that it thinks might have the IP address of the desired 
destination host. 
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This is relevant for your Intranet even if your users are just sending 
mail and Web requests to computers on your private network. Just 
as on the Internet, your users’ computers won’t know how to ac- 
cess www.anyplace.com without an IP address. You’ll need to pro- 
vide them with domain name service to make all this work. Before 
you go any further, take a look at the hierarchy of the Internet 
domain name system; this will give you a better understanding of 
domain name service for Net traffic within and outside of your 
Intranet. 

The Domain Name Hierarchy 

Figure 12.1 shows a portion of the Internet domain name hierar- 
chy. In the early days of the Internet, there were only a few do- 
mains available to users; this stems from the fact that most Internet 
users at the time were cloistered in a finite number of institutions: 
government, the military, universities, and so on. Ciurrently, do- 
mains are organized either by organizations or geographically. 




Figure 12.1 The Internet domain hierarchy — your domain name 

server skims down this chain until it finds the address for a desired 
host. 
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These domains contain subdomains (and so on) down the chain. As 
a result, you can describe an actual computer host name using a 
series of domain names and subdomain names. The domain name 
usually is associated with the type of organization. The organiza- 
tional domains can be described as such: 



com Used by commercial organizations. 

edu Used by colleges and universities. 

gov Used by government agencies. 

net Used by network providers (although many nowadays 

use com). 

mil Used by the military. 

org Used by non-profit organizations or anyone that 
doesn’t fit into the above categories. 

For example, a Web server at Anyplace Corporation, Washington 
DC, might have the host name wwwl2.dc.anyplace.com. Decon- 
structing this address, we can tell the following about the host 
computer: 

□ The host lies within a commercial outfit 

□ The computer belongs to Anyplace Corp. 

□ The computer’s located in Anyplacc’s DC office 

□ The computer’s host name within the organization is wwwl2 

These domains describe organizations in the U.S., but there’s a lot 
of Internet activity outside the U.S. Users outside the U.S. are as- 
signed a two-letter domain that corresponds to their country of 
origin. The naming convention for the subdomains is similar for 
U.S. hosts. 
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The country domains are standardized, and a listing is available at 
ftp://ftp.isi.edu/in-notes/iana/assignments/country-codes. 



Going back to domain name servers, say that you are on a personal 
computer trying to access a hypothedcal and imaginary Web site at 
wwwl2.dc.anyplace.com. Your personal computer’s DNR will send 
a message to your local domain name server. Your domain name 
server will try to find out the IP address of your desired host. 

Iterative and Recursive Queries 

There are two types of responses that your server can provide: re- 
cursive and iterative. A recursive DNS query returns the actual ad- 
dress of the desired host, regardless of how many other servers 
need to be queried. In contrast, an iterative query just passes the 
buck; the domain name server receives a response containing the 
address of another server that might know the correct IP address. 

A recursive query might go something like this: 

You Okay, here goes. I want to see what’s 

on ^vwwl2.dc. anyplace. com. I’ve got 
Navigator running, so I’ll just click on 
this link... here. 

Your computer Okay, wwwI2.dc.anyplace.com. I won- 

der what he means by that? I sure 
don’t know. I’ll just pass this on to the 
domain name server identified in my 
copy of MacTCP. 

Your domain name server Okay, I’ve got to look for an address in 

the com domain. Hey, you! You’re a 
com domain server, can you help me 
out? 

com server Well, let me take a look. Yeah, anyplace 

is one of my subdomains. Let me pass 
that on for you. 
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anyplace server 


Um, let me see. Yeah, dc’s in my do- 
main. Let me pass you on. 


dc server 


Hold on a minute. I manage this do- 
main. Let me check my tables. Oh 
yeah, wwwl2’s address is really 
192.0.1.12. Did you get that? 


anyplace server 


Got it. 


com server 


Got it. 


Your domain server 


Got it, and thanks everyone! Let me 
pass this on to my user. 


Your computer 


Oh, so that’s who that is. Okay, I’ll just 
send out an HTTP request to 
192.0.1.12. Boy, I sure hope it’s a Web 
server! 


You 


Gee! What a boring Web page. 


Now an iterative query might go something like this: 


You 


Okay, here goes. I want to see what’s 
on wwwl2.dc.anyplace.com. I’ve got 
Netscape running, so I’ll just click on 
this link... here. 


Your computer 


Okay, wwwl2.dc.anyplace.com. I won- 
der what he means by that? I sure 
don’t know. Fll just pass this on to the 
domain name server identified in my 
copy of MacTCR 


Your domain name server 


Okay, I’ve got to look for an address in 
the com domain. Hmmm. No one’s 
answering. How about you? Do you 
know where I can find this address? 
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Server #1 


1 

Nope, I sure don’t know. Try Server #2. 


Your domain name server 


Okay. Hey, Server #2, can you tell me 
where I might find this address? 


Server #2 


Nope, I sure don’t know. Try Server #3. 


...and so on... 




Server #7 


Hmm, yeah. I’ve got that in my files. 
The address is 192.0. 1. 12. 


Your domain name server 


Hey, it’s about time. Thanks a lot. 


Your computer 


Zzzzzzz...huh? Well, that took a little 
longer than usual. Oh, so that’s who 
that is. Okay, I’ll just send out an HTTP 
request to 192.0.1.12. Boy, I sure hope 
it’s a Web server! 


You 


Gee! What a boring Web page... and it 
took a long time to load! 


The difference between an iterative and a recursive query is that 
with the iterative query, the name server had to run several queries 
back and forth until it found a server that could respond to the 
request. Your name server can handle both types of queries depend- 
ing on how successful it is at finding a server than can respond 
correctly. 


Caching 




A domain name server will store answers to queries in a cache. This 
saves a bit of time, in that the server just refers to the cache file 
rather than send out a request on the Internet. Sometimes cache 
files save the server time even if they store a portion of the address. 
In the previous example, if you had tried to look up an address in 
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another commercial organization (that is, still in the com domain), 
your server would have die address of a com domain router, saving 
that much more dme in a query. Many servers date the cache ele- 
ments so that they expire after a certain amount of time. This pre- 
cludes the server from using outdated addressing information. 



NOTE 






Domain name resolvers, such as the one built into MacTCP, also 
cache requests. If you're still running MacTCP, look in the System 
folder for a file called MacTCP DNR. You won’t be able to read it, 
but it's a cache file containing frequently accessed domain names. 



Providing DNS on Your Intranet 

Your Intranet users primarily will require DNS to access hosts out 
on the Internet. However, they will also need to have some way of 
resolving hosts within your Intranet. As a result, the DNS you pro- 
vide to your users will be the linchpin of your Intranet — a service 
they cannot do without. This section looks at some of the concerns 
you’ll have as a DNS provider. 

The Mac's Missing Link 

The Macintosh has provided IP client services for several years. 
There have been FTP and Web servers for some time now. Domain 
Name Service is a relative newcomer to the Mac IP server family, 
and it’s a welcome one. Using some of the products discussed later 
in this chapter, you actually can provide DNS on the Mac, rather 
than relying on a Unix host as in the past. 

You’ll need a dedicated name server Mac within your Intranet. This 
computer does not need to be a high-end Power Mac, but it should 
be able to handle the traffic load presented by DNS requests from 
your Intranet users. As this machine will be dedicated, it will need 
to handle little else but serving domain name requests. Your name 
service, like your other IP services, will require a fast Internet con- 
nection more than it will require a fast microprocessor. Depending 
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on the size of your Intranet, you may be fine using a 68030- or 
68040-based Macintosh running one of the software packages dis- 
cussed in the next section. 

Primary and Secondary Name Servers 

When the name servers go down in our office^ the whole place 
shuts down. Without DNS, you cannot check email, browse the 
Web, or download files from an FTP server. This is because you 
most likely refer to these services by host names rather than IP ad- 
dress. Without DNS, your computers cannot resolve these names, 
and these services are then closed to you. Again, this is true even 
when accessing your Intranet hosts. The name server, therefore, 
represents a single point of failure for your Intranet. 

One thing you can do is set up primary and secondary name serv- 
ers. In this scenario, it’s unlikely that both machines will go down 
at the same time, so your users will have access to DNS at all times. 
Many domain name resolvers, such as those used in MacTCP and 
Open Transport, allow you to declare multiple name servers for this 
very purpose. If the primary server goes down, your users’ comput- 
ers will refer to the secondary server for DNS requests. 

Your primary server will maintain DNS lookup information for 
your Intranet hosts in files configured by your administrator. This 
server will field requests for host information from your Intranet 
users; it will also respond through use of cache files to queries from 
your users for addresses on the Internet. Your secondary name 
server will refer requests to your primary server while the primary 
server is working; however, the database and cache files can be peri- 
odically uploaded to your secondary name server to ensure that 
information is available to your Intranet if and when your primary 
service becomes unavailable. 

Naming and Registering Your Domain 

Your Intranet may already exist in a network that has a defined 
domain. You may be trying to set up an Intranet for your depart- 
ment at a large university. As academia was one of the vanguards of 
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the Internet, there’s an excellent chance that you already exist in a 
defined domain. If you’re setting up shop in a Internet-firee organi- 
zadon, however, you’ll have to name and register a brand-spanking 
new domain. Before you register your domain name, you have to 
give it a name. By naming and registering your domain, you avoid 
the possibility of having 30 other people claiming the same domain 
name. 

Host naming convcndons were discussed earlier in the section 
“The Domain Name Hierarchy.” The list of domains will give you 
an idea of where your organization fits into the hierarchy. Keep in 
mind that your domain name should be easy to figure out. Apple 
and Microsoft, for example, both use domains that are easy to re- 
member (apple.com and microsoft.com). The same should be true 
for your organization. You want name recognition. Anyplace Cor- 
poration is going to be a lot more recognizable on the Net as 
anyplace.com as opposed to some other name. 

If your organization is large, you may want to think about setting 
up subdomains. Many large organizations that are split into 
different parts of the country utilize subdomains. The National 
Aeronautics and Space Administration (NASA), for example, is a 
U.S. government agency. Therefore, all NASA computers should lie 
in the domain, nasa.gov. However, NASA is comprised of several 
field centers located throughout the country. Computers located in 
NASA’s Johnson Space Center, in Houston, would then have the 
designation jsc.nasa.gov. In this way, the different field centers are 
served by different name servers. You may want to adopt a similar 
approach if yom organization is scattered among remote sites. 

Querying the InterNIC Domain Name Registry 

After you’ve decided on a domain name, it’s time to register it. The 
InterNIC project is a cooperative effort between AT&T Corp. and 
Network Solutions, Inc. Network Solutions handles the domain 
name registrations. After you’ve determined your domain name, 
you’ve got to check to see if anyone else is using it. You can do this 
from a Telnet session or using InterNIC’s Whois Web interfiice, as 
shown in figure 12.2. You can get to this service at http:// 
internic.net/cgi-bin/whois. 
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WHOIS is used to look up rvconls in the main database. Each record 
has a "handle" (a unique Identifier assigned to itX a name, a record 
type, and various other fields depndingon the type of record. 








To use WHOIS. simply type in your target string(le. somename.com). 
The default action, unless directed otherwise with a keyword (e.g. 
"domain root"), is to do a very broad search, looking for matches to 
your target in many fields: handle, name, nicknames, hostname, net 
address, etc. and finding all record types. 








WHOIS then shows the results in one of two ways: as a full, detailed 
display for a sin^e match (with possible strbdisplay). or as one- or 
two-lj^e summaries for multiple matches. 








Enter "help" in the query window below for a more detailed description of the 
"whois" service. 








This is a searchable index. Enter search keywords: \mcp. ocm 
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Figure 1 2.2 InterNIC allows you to query the domain name reg- 
istry to see if your dream domain name has been used. 



Let’s take the Whois service for a spin. Entering mcp.com in the 
search field gives the following response: 

Macmillan Computer Publishing (MCP-DOM) 

201 W 103rd Street 
Indianapolis, IN 46290 

Domain Name: MCP.COM 

Administrative Contact: 

Gold, Jordon (JG187) jgold@MCP.COM 
(317)581 -3669 

Technical Contact, Zone Contact: 

Hoquim, Robert (RH159) robert@IQUEST.NET 
(317)259-5050 ext 505 ext. 505 

Record last updated on 01 -May-95. 

Record created on 13-0ct-94. 
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Domain servers in listed order: 

NS1.IQUEST.NET 198.70.36.70 

NS2.IQUEST.NET 198.70.36.95 

Here we see that mcp.com is indeed a registered domain. We find 
that there are two contacts: an administrative contact within the 
sponsoring organization, and a technical contact from the organiza- 
tion that is supporting the domain. We also see the host names and 
IP addresses for the domain name servers that manage the 
mcp.com domain. Had mcp.com not been registered, no such in- 
formation would have been returned. 

Registering your domain name with InterNIC doesn't give you any 
legal rights to it. You can't register a name that contains a trade- 
mark and expect not to hear from the trademark's owner. . .or the 
owner’s attorney. 

Registering Your Domain Name with InterNIC 

Registering your domain name with InterNIC costs $100 for a 
two-year subscription. It’s easy to do, and InterNIC provides an 
easy-to-use Web form to register. The link for this form is given at 
the end of this chapter. 

A portion of this form is shown in figure 12.3. You’ll be queried for 
all types of administrative and technical contact information. You’ll 
also need to provide the names and addresses of primary and sec- 
ondary name servers that are responsible for your domain. Within a 
few weeks, your new domain name \vill be activated. 






Figure 12.3 Tou can register for a domain name with 
InterNIC^s online forms. 



QuickDNS Pro 

Now it’s time to configure a domain name server. The first applica- 
tion we will review for your DNS is QuiclcDNS Pro from Men & 
Mice (http://www.menandmice.is), a software company in Ice- 
land. Besides QuickDNS Pro, Men & Mice offer a shareware 
version, QuickDNS Lite; these versions are identical in every way 
except that QuickDNS Lite is a caching-only name server. 

Installing QuickDNS Pro 

Like WebSTAR and several other applications discussed in this 
book, QuickDNS Pro actually is comprised of two applications: 
QuickDNS Pro Server and QuickDNS Pro Admin. QuickDNS Pro 
is Power Mac native but will run on any machine from a Macintosh 
Plus or later. You’ll need to be running System 7 as well as 









372 


Building and Maintaining an Intranet with the Macintosh 







MacTCP 2.0.6 or Open Transport. Allocate as much RAM as pos- 
sible to QuickDNS Pro Server and at least 1 MB RAM to the Ad- 
min program. However, you’ll get better performance and will be 
able to serve more domains with larger amounts of RAM allocated 
to the server. 



NOTE 






You'll do better with a dedicated QuickDNS Pro server (or any 
dedicated Intranet server) if you only include the minimum num- 
ber of apps you need to run the service. Therefore, get rid of any 
screen savers or other extensions as well that you won't need to 
run QuickDNS Pro. 



Double-click on the QuickDNS Pro Server application. YouTl be 
asked to enter a validation key. This key can be obtained from Men 
& Mice (see Note). When the validation key is accepted, you’ll see 
a status window similar to that shown in figure 12.4. 




As of this writing, Men & Mice provides 14-day evaluation keys at 
http://www.menandmice.com/cgi-bin/QDNSKeyForm. Permanent 
keys can be ordered through the company. 



This status window details the following information: 



Free memory Total amount of free memory available to the server. 
Increasing the allocated memory increases the size of the server’s 
cache file. 



Packets in 
Packets out 
Requests in 

Requests out 

Replies in 
Replies out 

Replies from cache 



Total number of messages received. 

Total number of messages sent. 

Total number of requests received from your 
Intranet users’ computers. 

Total number of responses to other servers’ 
queries. 

Replies received from other name servers. 

Replies sent out to your Intranet users’ com- 
puters. 

Total number of cached replies. 
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Figure 1 2.4 QuickDNS Pro allows you to monitor the number of 
service requests handled by your server. 



Monitoring the status window periodically helps you decide if your 
server is handling the load of DNS requests. You can allocate more 
RAM to the application if the amount of free memory becomes low 
or if the number of cached replies appears to stagnate over time. As 
you can see, the most important features that you can add to yom 
DNS server are RAM and network bandwidth. 

QuickDNS Pro keeps server addresses of some important domain 
name servers stored in the server application itself The server refers 
to these root servers for referral to some of the main domain serv- 
ers. You’ll also notice that QuickDNS Pro maintains an activity log. 
You can periodically check the log to troubleshoot any problems 
with your server. 
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Installing QuickDNS Pro Admin 

Remember that the two tasks of your Intranet name server are to: 

□ Respond to name requests from your users for IP addresses 
outside your Intranet 

□ Respond to name requests from the Net for your domain 

QuickDNS Pro will handle the first task using information regard- 
ing various Internet roots servers. As it handles recursive name 
queries, QuickDNS Pro can act as the primary name server for your 
Intranet. Your task now is to create the information that is served 
to users outside your Intranet. 

Double-click on the QuickDNS Pro Admin icon. At this point you 
need to create a new domain. Click on File and choose New. You’ll 
see a blank window titled Domain vmtitled.com. At this point, you 
would start creating records to correspond to your name server and 
other important server information. However, rather than create 
one from scratch, let’s look at a demo domain folder that comes 
with QuickDNS Pro. 

Close any open windows. Open the mydemocompany.com. file in 
the Example Domains folder. You’ll see a window similar to that 
shown in figure 12.5. This is the domain data table used by 
QuickDNS Pro Server to respond to name requests. The table is 
comprised of several records. Before we look at how to set up the 
individual records, let’s take a look at some of the table parameters. 

Go up to Domain and select Get Info. A dialog box like that dis- 
played in figure 12.6 will appear. This window allows you to specify 
information about the domain for other servers, but it also tells the 
QuickDNS Pro how to handle the domain information. Let’s look 
at the different fields one by one. 
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Figure 1 2.5 Tou enter information about your domain hosts in a 
QuickDNS Pro domain table. This table is read by the server appli- 
cation and is used to respond to name queries. 




Figure 12.6 Tou can enter a specific information regarding your 
domain in the QuickDNS Pro Domain Information window. 
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Name This is your domain name. It’s displayed in the tide bar 

of the domain window. 

Primary This field contains the host name of your domain’s 
primary name server. Enter the relative host name; 
QuickDNS Admin appends the domain name you just 
created. 

Hostmaster This contains the email address of the domain adminis- 
trator. Note: it’s conventional to leave the dot instead 
of the standard @ after the hostmaster’s mail account. 

Expire The number of seconds that the secondary server will 

honor a domain table copied from a primary server. If 
this time elapses and the primary server is not reach- 
able^ the secondary server stops serving this data. 

Serial An arbitrary number used by your secondary name 

servers to evaluate the currency of their data. Second- 
ary name servers know to use and copy primary name 
server domain tables if this serial number is greater 
than the one in the table version they have. This num- 
ber should be incremented each time you modify the pri- 
mary domain table. Many administrators incorporate 
the revision date as a serial number using a date format 
of YYMMDD# where YY=year, MM=month, and 
DD=day. The pound sign (#) is used as a revision num- 
ber in case several updates are made in one day. 

Refresh The number of seconds after which the primary server 
attempts to copy over domain tables from the primary 
server. 

Minimum The minimum amount of time, in seconds, that this 

domain table is viable. If this field is empty, the default 
value is taken from the Time to live field. 

Retry The number of seconds that the secondary server 

should wait to contact the primary server if the Refresh 
period has expired. 

Time to live The time in seconds for which this table remains viable. 

If you leave this field empty, the default value (the val- 
ue from the Minimum field) is used. 
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Men & Mice has included an AppleScript which updates your do- 
main table serial number. Look in the QuickDNS and AppleScript 
folder. 



When you create your own domain table, store the information in 
the Primary data folder. 



Resource Record Types 

Now that you’ve defined the general server parameters for your 
domain, it’s time to develop the actual records that your server will 
distribute. Looking back at figure 12.5, you see that there are vari- 
ety of columns for each record of information. Each one of these 
records contains information about important hosts in your do- 
main. These column headings are: 

Name Name of the particular host. Once you have the do- 

main name defined, you can just use the host name. 

For example, if you insert only www in this field, 
QuickDNS Pro will append to domain name when you 
exit this field. 

TTL Length of time in seconds that this field should be 

cached by the name server requesting this record. Used 
to tell other servers the stability of the address. If left 
blank, this field defaults to the Minimum field de- 
scribed previously. 

Type This field contains record’s resource type. See the list of 

resource record types below. 

Parameters Several of the standard resource record types have one 
or two parameters. These two fields contain one or 
more of those parameters 

Comments You can leave comments in this field for future referral. 

There are many DNS record resource types used in various server 
systems. QuickDNS Pro uses several of them to define the types of 
resources in your domain. These designations are entered in the 
Type field described above. Also listed with each record type are 
the parameters required for each type. 
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SOA — Domain Information 

The Domain Information (SOA) record contains essential informa- 
tion for your domain. Every domain has one Domain Information 
record. When a domain is created, QuickDNS Admin creates this 
record automatically for you and places default values in the record. 

NS — Name Server 

The NS record lists the authoritative name servers for your domain. 
Primary and secondary name servers should be entered in different 
records. 

Parameter — The host name of the name servers. 

MX— Mail Exchanger 

The MX record contains information that can accept mail for a 
domain. You may have primary and secondary mail servers for each 
domain, but like the NS records, they should be listed on different 
lines. This record is important because it allows mail addressed to 
anyplace.com to be routed to a particular host. 

Parameters — ^The first parameter represents the priority of the mail 
server. For example, a record with an MX parameter of 10 will be a 
higher priority than a mail server with a parameter of 20. The sec- 
ond parameter is the actual host name of the mail server. 

A— Address 

The Address record is the crux of all of domain name service. This 
record maps the name of an important host in your domain to an 
IP address. This is the important information that servers outside 
your Intranet will be looking for. 

Parameter — ^The host IP address. 

HINFO — Host Information 

HINFO records are used to acquire general information about a 
host. The main use is for protocols (such as FTP) that can use spe- 
cial procedures when talking between machines or operating sys- 
tems of the same type. 
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Parameters — One or two fields of information about the host, such 
as host platform and operating system. 

CNAME — Canonical Name 

The CN record is used to set up aliases between hosts. The exam- 
ple in figxire 12.5 maps a mailing host to the same name as the FTP 
host. In this case, the main FTP server within the domain is run on 
the mail server as well. 

Parameter — ^The real host name as denoted by a previous Address 
(A) record. 

PTR— Pointer 

The PTR records are used in developing reverse domains. More 
discussion on PTR records is found in the following section, ‘‘Cre- 
ating a Reverse Domain.” 

Parameter — ^The actual host name corresponding to a reverse IP 
address. 

TXT— Text 

The Text record is used for additional comments. You can store up 
to 256 characters in this record. This record is often used to de- 
scribe a server’s physical location. 

Parameter — ^Your text. 

Creating QuickDNS Pro Domain Records 

As seen in figure 12.5, the first thing to do is use NS records to 
define your primary and secondary name servers. After that, you’ll 
want to define your primary and secondary name servers. Note that 
you have only defined the host names of these servers, so you’ll 
need to define their IP addresses. This is really what the DNS is all 
about. You map the IP address to the host names using Address 
records. 
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For hosts that youVe defined as rn^I and name servers, the a^ 
dresses in the Name fiejds of the Address reo)rds muM cQrres^ 
vvith the naniesyouVedefinediffit^^^ Pararneterftelds. 




Similarly, you’ll need to use Address records to map all the hosts in 
your domain. This is a very tedious process, as you’ll need to up- 
date the table each time you register a new host in your domain. 

We will talk about security in greater detail in Chapter 13, “Intra- 
net Security.” However, you’ll need to think about which servers 
you’ll wish to expose to the Internet. You may want to list some 
public Web and FTP servers that may lie outside your firewall. Keep 
in mind that if you list hosts in your domain table that lie inside 
your firewall, they may still be inaccessible. Conversely, leaving a 
machine out of the DNS does not provide absolute security for that 
machine. 



Load Balancing 

You may want to share traffic load of a popular service, such as 
HTTP, among several computers. Apple Computer manages several 
of its Web sites in this manner. Requests made to one Web server 
domain (www.apple.com) are actually shunted to one of a set of 
computers. This is known as load balancinj^, QuickDNS Pro Server 
supports load balancing, as shown in figure 12,5. Note that in the 
domain table, several address records are used to map the same 
domain (www.mydemocompany.com) to four different IP address- 
es. QuickDNS Pro routes traffic to these Web servers in a round- 
robin fashion. This is an effective means of distributing heavy traffic 
load among several computers. 

Creating a Reverse Domain 

At times, your Intranet users, as well as your users on the Internet, 
will want to look up host names based on your servers’ IP address- 
es. For this reason, you’ll want to create reverse domain tables. For 
each domain table you create, you’ll need a corresponding reverse 
domain table. Reverse domains map IP addresses to host names. 
This is done by using the PTR record discussed earlier. 
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For an example of reverse domain table, go back to QuickDNS Pro 
and open the 1.168.192.in-addr.arpa. file. This demo file is a re- 
verse domain of the mydemocompany.com. example we just re- 
viewed. Figure 12.7 shows what this sample reverse domain table 
looks like. 
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Figure 12.7 Tour reverse domain table will be comprised of NS 
and PTR records. 



Note that with your normal domain table, you had the host names 
in the Name fields and the IP addresses in the Parameter fields of 
the A records. With PTR records, you see that the reverse is true; 
the host name is in the Parameter field and the IP address is in the 
Name field. 









382 



Building and Maintaining 



an Intranet with the Macintosh 



NOTE , Along with the QuickDNS Pro distribution, A/len & Mice has pro- 
w vided an AppleScript that creates reverse domain tables from exist- 

ing domain tables (called Create Reverse Domains). To use this 
script, open all your domain data files with QuickDNS Admin and 
run the script. The script will locate every A record in your do- 
mains and update the corresponding PTR record. PTR records and 
reverse domains will be created as needed. 



Importing Unix DNS Tables into 
QuickDNS Pro 

QuickDNS Pro has some other useful administrative features. Most 
name servers are run on Unix machines that store domain informa- 
tion in ASCII text files. You can import these files and convert 
them to QuickDNS Pro domain tables using the Domain Compiler 
(located in the For Domain Text Files folder). It couldn’t be sim- 
pler; just drag-and-drop your text files onto the Domain Compiler, 
and it’ll create the files for you. 



Other Name Servers 

QuickDNS Pro is by no means the only MacDNS server. As Inter- 
net applications have proliferated on the Mac in recent years, DNS 
applications have sprung up within the past year. It’s likely that 
more will be developed in the near future. 



MacDNS 

Developed by Apple, MacDNS is distributed as part of die Apple 
Internet Server Solution (AISS). AISS is a CD-ROM collection of 
popular commercial and shareware Internet server applicadons. 
Unfortunately, Apple does not sell AISS separately, and you can 
only obtain the CD by purchasing a Workgroup Server. There is a 
great deal of public pressure to change this, but as of this writing, 
MacDNS is not available through normal commercial or shareware 
channels. However, this may have changed by the time you read 
this. 
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See Chapter "Ghdpang YoOr Server Hardware, " for more infor-^ 
matipn on the Apple IhternetServerSolUtiorir 



UiJike QuickDNS Pro, MacDNS functions as a caching-only serv- 
er. While QuickDNS Pro also employs a DNS cache in addition to 
its primary and secondary name server capabilities, MacDNS only 
serves DNS entries from its cache file. This prevents MacDNS from 
acting as a primary name server. Furthermore, MacDNS performs 
no recursive DNS lookups. As a result, users’ name resolvers need 
to make several queries before a host name is resolved. 

MacDNS would be useful in an Intranet environment where not 
many DNS calls are made outside the firewall. If you are in an orga- 
nization where DNS requests are made for hosts only within your 
domain, MacDNS’s caching and iterative service would be suited 
for an Intranet domain name server. You could always have 
MacDNS point to a Unix name server for queries of Internet hosts. 



MIND 

Macintosh Internet Daemon (MIND) is the earliest DNS server for 
the MacOS. Originally named MacDNS, MIND is still in alpha 
testing as of this writing. It’s intended to be a freeware domain 
name server. MIND apparendy does not have the slicker graphical 
domain tables of QuickDNS Pro and MacDNS but relies more of 
the Unix-style DNS configuration. 



Summary 

Domain name service is a powerful and essential tool that you can 
provide for your Intranet community. This is true even if you 
choose not to expose your Intranet to the general Internet. Do- 
main name servers running under the MacOS are now available and 
you have several options that you can use to provide this much- 
needed service to your users. 
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We’re almost done with the hard stuff. In Chapter 13, “Intranet 
Server Security,” we’ll talk more about securing your Intranet and 
we’ll discuss the prospect of insulating, or at least guarding, your 
network from the general Internet. If you wish to stick to issues 
more related to DNS, feel free to read one of the following 
chapters: 

□ Chapter 2, “Wiring Your Intranet,” to Icam more about net- 
working terminology and other issues related to your network 
hardware. 

□ Appendix B, “Establishing an Internet Presence,” to learn 
more about adapting or expanding your Intranet to provide 
services to the Internet. 

Links Related to This Chapter 

Domain Name Servers http://www.freedonia.com/ism/ 

for MacOS dns/dns.html 

InterNIC Whois service http:/ /internic.net/cgi-bin/whois 

InterNIC Domain http://internic.net/reg/ 

Name Registration reg-forms.html 

QuickDNS http://www.menandmice.is/ 

QuickDNS 

MacDNS FAQ http://cybertech.apple.com/dns/ 

DNS_FAQ.html 

MIND Home Page http://www.scriptweb.com/at/ 

MIND/mind_info_news.html 
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Intranet Server Security 

Your Intranet is up and running. Users are downloading files, ex- 
changing email, and checking Web pages every day. On your Intra- 
net, you’ve provided all your users could need to do their jobs. The 
problem comes when they need to access locations outside your 
Intranet. Once you open that door to the Net, you unleash a Pan- 
dora’s box of problems, concerns, and some potential headaches. 
Not only do you need to restrict sensitive information from acci- 
dental discovery by your users, you now need to worry about the 
hordes of Internet users knocking on your door. 

You may not want to establish services geared toward the Internet. 
Home pages and FTP servers are nice public relations gestures, but 
you may neither have the time nor the resources to devote to tliem. 
By allowing your users to gain access to the Internet, however, you 
also are allowing the Internet to gain access to your users. 

Luckily, you’re running your system on the Mac. The MacOS pro- 
vides fewer loopholes than Unix or other operating systems for 
undesirable elements to compromise. Still, the old saying goes, “An 
ounce of prevention is worth a pound of cure.” This chapter dis- 
cusses a few ounces of prevention including the following: 

□ The viability of the MacOS as a server platform 

□ How to determine the level of security you need 

□ A brief introduction to firewalls 

□ A brief introduction to SOCKS and Proxy servers 
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□ How to protect against viruses 

□ How to encrypt your transactions 

Advantages of the MacOS 

The MacOS is primarily designed to be an operating system for the 
desktop computer. AppleShare is an extension of the MacOS for 
use in file sharing, but primarily the MacOS is designed to work 
between you and your software. The personal approach was revolu- 
tionary back when the Mac was introduced in 1984. 

In contrast, the Unix operating system, upon which the majority of 
Intranet and Internet services currendy are run, was designed as a 
multiuser system with remote access capabilities built into the oper- 
ating system. Unix was developed around the dawn of the Internet, 
so the two have grown up hand in hand; for many years, Unix and 
the Internet were almost synonymous. 

Unix was designed to allow users to connect to computers and 
workstations remotely. As a result, hackers are only a few ASCII 
characters away fi'om logging on to a Unix workstation. Using Tel- 
net, FTP, or email, hackers can attempt to insert a program on the 
Unix machine. If configured correctly, this executable can give us- 
ers system-level privileges, assigning them fireedom to wreak havoc 
on the system. 

While the MacOS supports IP services through MacTCP, and re- 
cently Open Transport, these services are not native to the operat- 
ing system. You selectively add these services to a Mac through 
third-party applications such as Web, FTP, and email servers. 



NOTE 




Several Macintosh Internet companies sponsored a $10,000 secu^ 
rity challenge. Challengers needed to obtain a line from aWeti 
page that had been hidden using Maxum Software's NetCloak CGI 
application; the remainder of the page was visible to unaiithonzed 
users. After six weeks, no one was able to compromise the Web 
server. For details of this challenge, read the report given on http:/ 
/www.forestnet/advanced/securityehallenge,html. 
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This is not to say that PC operating systems like the MacOS and 
Windows NT are impregnable server platforms. It’s more likely 
that as hackers have honed their skills for years on Unix systems, 
loopholes in the MacOS server security have not yet been exploit- 
ed. As MacOS servers become more popular and more prevalent, 
there may be incentives to uncover these loopholes. Possible securi- 
ty loopholes built into the Mac IP servers could be discovered 
more readily now that the applications are experiencing heavy use 
in Intranets and throughout the Internet. 

Rest assured, that while not impregnable, the MacOS offers litde 
opportunity for hackers to breach your Intranet. Many of the loop- 
holes that exist within the Unix OS are not present in the MacOS. 
This is one reason for the popularity of the Macintosh as an Inter- 
net/Intranet server platform. 

How Secure Do You Need to Be? 

My brother and I had this tree house when we were growing up. 
You could enter the house by climbing a wooden ladder and undo- 
ing the combination lock on the door. The fact that the door was 
the only wall on the entire tree house didn’t seem to bother us; 
except for some flimsy wooden railings, the rest of the tree house 
was exposed. Even so, we were sure that the big, shiny combinadon 
lock would keep out the imwanted neighborhood kids. However, 
we never had any neighborhood kids try to invade our tree house. 

It will be a waste of your time to build a fimcy and expensive securi- 
ty system if your security needs are minimal. Similarly, you’ll be 
wasting more money and time if your security measures don’t ad- 
dress the core loopholes of your Intranet. The first thing you’ll 
need to do is determine the level of security that you’ll need to use 
to protect your Intranet. 

Know Your Enemy 

So just who are you protecting your Intranet against? In some 
sense, you are protecting your system from accidents within your 
organization. Users can accidentally load FTP virus-infected 
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applications to your FTP server. They can accidentally delete im- 
portant data while connected to your Web server. These threats, 
however innocuous, are real and need to be dealt with appropriately. 

The threats to your system from the Internet, however, are any- 
thing but innocuous. Unconstrained by geography, hackers from all 
over the world can attempt to access your system. Just recendy, the 
FBI tracked down a hacker who allegedly broke into computers at a 
prestigious university. The hacker tiien allegedly used these com- 
puters as a jumping point to other systems on the Internet. This 
individual allegedly installed sniffer routines on various computers. 
Gaining access to these computers allowed the hacker to attempt to 
compromise other computers on the Internet. The big, shiny 
combination lock employed by the university failed to prevent the 
hacker from slipping around the side and past the flimsy wooden 
railings. 




A sniffer application is any application that records a user's key- 
strokes and relays them somewhere. Conceivably, a hacker could 
reproduce users' account names and passwords. One type of sniff- 
er program appears to the user as a familiar login sequence. How- 
ever, the user logs in only to be given a response that the system 
is down and to try again later. In reality, the system is up and the 
user's name and password have been stored in a file for use by the 
person who installed the sniffer program. 



Hackers are tiie equivalent of the guys in your high school who 
spray-painted the school buses or flattened teachers’ tires. While 
doing no major damage, they create a lot of havoc and make other 
people’s lives miserable. They usually do it for the thrill of breaking 
into somewhere they shouldn’t be. Even so, they leave your system 
voilnerable to others who may have specific desires to breach your 
Intranet. 

In addition to thrill-seeking hackers, you’ll need to secure your 
system from opposition if your organization is engaged in a 
competitive environment. This is true even if you work for a not- 
for-profit organization. For example, if your Intranet senses an aca- 
demic department, you will want to secure the network from 
people interested in the department’s research or financial acti\dties. 
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Even if you totally isolate your network from the Internet, you’ll 
still need to ensure some level of internal security both for and 
from your users. Typical Intranet security concerns include the 
following: 

□ Protecting sensitive personnel data 

□ Keeping users from accessing company management 
information 

□ Securing user’s personal information from other users 

□ Isolating server applications from accidental disruption 

□ Protecting server data from accidental disruption 

Most of your concerns deal with accidental interruption from users. 
However, if your organization is large enough or the information 
you store is valuable, you always run the risk of one of your users 
maliciously trying to comprise your network. 

Even so, your most serious threats will likely come from outside 
your Intranet. By giving users email and Web access to the Internet, 
you expose your Intranet to interested parties on the outside. Some 
of the concerns you’ll face when securing yourself against the Inter- 
net include the following: 

□ Denying your site as an Internet jumping point 

□ Protecting information sensitive to your organization 

□ Protecting your users’ data 

□ Preventing malicious disruption to your Intranet services 

□ Protecting against introduction of software viruses to your 
system 

There is virtually no way to establish a goof-proof security system 
for your Intranet. Similarly, unplugging from the Internet is about 
the only foolproof means of securing your Intranet from the out- 
side. System administrators, regardless of how lax they might about 
security, don’t want to see their network compromised by outside 
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threats. The degree to which you guard against these types of 
threats is a tradeoff between the resources at your disposal and the 
viability of your services. The questions that you’ll need to ask 
yourself when allocating your time and money to security provi- 
sions include the following: 

□ If this system is compromised, how much time and money 
will it cost to repair the damage? 

□ Is there sufficient time and money to put a system in place 
that minimizes the occurrence of a security breach? 

□ What will a security breach do to the users’ confidence in the 
Intranet? 

As I’ve said, system administration is a series of tradeoffs between 
risks and resources. You’ll have to evaluate these tradeoffe as we 
discuss your technical options in the rest of the chapter. But that’s 
enough philosophizing. Let’s look at the options and tools you 
have at your disposal in securing your Intranet. 

Securing Against Internal Threats 

As mentioned previously, threats against your Intranet from your 
users are mostly benign. While it’s unlikely that you will have to 
deal with hackers within your own organization, you’ll have to pro- 
vide some level of defense to prevent any intentional access of your 
system. 

Quite honestly, the best way to reduce the possibility that a user 
will bring a server down is to restrict user access to that server. 
What users cannot touch, they cannot break. Generally, your Intra- 
net will be based around the Web, email, and FTP services. 




See Chapter 14 r ''Sample Intranet Applications," forexamplesdf 
' seivices that you can provide pn your Intranet 



By restricting access to the Web servers, except through browser 
requests, you avoid the possibility that anyone will accidentally 
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delete any of the server contents. You may chose to connect to 
your Web server cither through FTP or through file sharing. Either 
way, you should remove all guest and anonymous access to the Web 
servers. Install one user account under the System 7.5 Users and 
Groups control panel. If you are using NetPresenz on your Web 
server, NetPresenz will adopt the file sharing user configuration for 
your FTP services. Hey, if you’re really paranoid, remove the key- 
board from the Web server after it’s been configured. This will help 
prevent any accidental access. 



NOTE ^ In general, it's a risky business to allow HTTP and FTP traffic on 

w the same computer. An aggressive hacker could upload a bogus 
CGI, which would then be executed by a browser request. Such a 
CGI script could create a new user account, or worse, remove data 
from the server. If you do need to provide FTP access to your Web 
server, use the FTP server's capability to restrict communication 
from only one other machine — ^your personal computer. 



Your email server should have file sharing turned off. POP and 
SMTP traffic is transferred using MacTCP, so you can turn off file 
sharing. Your POPmail server is pretty resistant to data loss; re- 
member that POPmail is transferred down to users’ desktop com- 
puters, so few mail messages should be residing on the server for 
long periods of time. 



NOTE 






See Chapter 1 1 , "Email Services," for more information on POP 
servers and email service in general. 



NOTE 






It's important to physically secure your Mac servers. Their simple 
desktop interface makes them much easier to navigate from the 
keyboard than Unix machines. As a result, you'll need to restrict 
physical access to the machines, or implement some sort of pass- 
word access, if you want to guard against physical intrusion. 
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Securing Against External Threats 

As discussed previously, your threats from outside your Intranet will 
not be as innocuous as those within your organization. You will 
have to outwit and out think these guys. We’ll spend the next part 
of the chapter looking at software and hardware options you have 
in securing your Intranet from outside access. 

Using Firewalls 

In securing your Intranet, you have to make the tradeoff between 
reducing exposure to your Intranet and allowing your users the 
resources they need to get their jobs done. For example, pulling the 
plug on your Internet connection gready reduces your odds of 
getting hacked; it also gready reduces the chances that your users 
will be able to get their email out of the building — not to mention 
any work-related Web surfing. 

Firewalls are one way of resolving your dilemma. Firewalls serve the 
same purpose as their namesakes. Real firewalls are comprised of 
heavy concrete or some other inflammable material: they prevent 
fire from spreading between buildings. Similarly, firewalls insulate 
your private Intranet fi*om any kind of unwanted Internet traffic. 



What Is a Firewall? 

In the context of Internet traffic, the term firewall describes a sys- 
tem or group of systems that implements a restriction of data flow 
between two networks. In our discussion here, we’ll be talking 
about restricting data flow from the Internet back into your private 
network. Firewalls are comprised of hardware and software solu- 
tions and work to restrict transactions as you permit. Unlike the 
real thing. Intranet firewalls allow traffic to pass back and forth 
between the Internet and your private network. Rather than a wall 
of concrete. I’ve heard of firewalls likened to a tinted glass window; 
you can see out, but no one can see inside. 

Figure 13.1 shows a diagram of how a firewall would be imple- 
mented between your Intranet and the Internet. Information can 
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get out of the Intranet so that your users can exchange email and 
Web traffic with Internet hosts. However, certain types of traffic 
get rebuffed at the firewall or are shunted to different types of 
computers. Let’s cover the various types of firewalls that you can 
implement to work with your Intranet. 



Your Intranet 




Figure 13.1 The firewall computer sits outside your intremet and 

filters incoming Internet traffic. 



Types of Firewalls 

The type of firewall that you institute depends on the restriction 
that you want to place on traffic entering and leaving your Intranet. 
Luckily, your options vary from the very complicated and expensive 
to the reliable and inexpensive. 

Single Bastion Host 

Private networks like your Intranet often are likened to medieval 
casdes. Your firewall is then analogous to the bastions where de- 
fenders of the castle repelled invaders. Therefore, computers in- 
volved in your firewall often are referred to as bastion hosts. In the 
configuration shown in figure 13.1, the bastion host obstructs IP 
traffic in both directions. HTTP traffic in and out of your Intranet 
is intercepted by the bastion host. 

This can be problematic as IP traffic needs to be clearly transferred 
between client and host. As a result, the bastion employs software 
known as a proxy to communicate between the client and host. This 
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proxy software does not work blindly and can restrict communica- 
tion based on the Internet host IP address or other parameters. 
We’ll talk more about proxy servers shortly. 

Using Routers and Bastion Hosts 

As discussed in Chapter 2, “Wiring Your Intranet,” a router is a 
specialized piece of hardware that screens traffic between you and 
the Internet. Routers are getting more sophisticated with time, but 
their basic job is to block traffic based on IP port number as well as 
its source and destination. Routers can be used with bastion hosts 
to alleviate the traffic from flooding the bastion host. A diagram of 
this implementation is shown in Figure 13.2. 

The router can permit some traffic to go direedy to the Intranet. 
Web traffic, for example, typically travels on IP port 80. Your rout- 
er can be configured to allow Web traffic to move uninhibited, 
unless you count the router, between the Internet and your net- 
work. Moving network traffic through the router is much more 
efficient than forcing it through a proxy server. Your bastion host 
still proxies some network traffic, but only a predetermined 
amount. 




Figure 13.2 Routers can expedite traffic flow through your 
firewall while maintaining your Intranet security. 



Multiple Bastion Hosts 

With a single bastion host firewall, your traffic is slowed apprecia- 
bly. Furthermore, if you want to set up public services, such as Web 
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and FTP servers, you’ll end up cramming a lot of network traffic 
through the firewall. For large organizations, this can be a problem. 

Another option is diagrammed in Figure 13.3. Using multiple bas- 
tion hosts, you can spread the load between the firewall computers 
more evenly. These hosts do nothing but provide a specialized ser- 
vice. In the figure, you see that public Web and FTP servers exist 
outside the Intranet; much of the traffic between the Internet and 
your public servers never needs to filter into your private network. 
You can administer with those servers through a proxy server. Simi- 
larly, that proxy server can transfer FTP and HTTP traffic in and 
out of your Intranet. Finally, your email service lies outside your 
firewall but relays POPmail into your Intranet. 



Yourlntranel 




Figure 1 3.3 Usin£i multiple bastion hosts, you can spread the net- 
work traffic between several firewall computers. 



Your Firewall Hardware and Software 

Your firewall is one of the few areas of your Intranet where the 
MacOS does not present the best solution. There are sophisticated 
proxy software solutions that run on small Unix-based machines. 
You should consult with a LAN administrator, as discussion in the 
area of Unix proxy software is outside the scope of this book. We 
will discuss basic proxy concepts and will also take a look at some 
SOCKS software for the Macintosh. 
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Basic Proxy Concepts 

The main job of a proxy server is to accept or reject all IP traffic 
coming into an Intranet. Basically, the proxy server compares the 
traffic origin to a list of authorized addresses. A special type of 
proxy server, knoM^n as a SOCKS server, goes one step further. 
SOCKS software nms on the bastion hosts and monitors traffic 
entering and leaving the Intranet. SOCKS servers differ from regu- 
lar proxy servers in that SOCKS servers only pass information that 
is accompanied by proper user authorization. 

Applications on your users’ desktop computers will have to be 
SOCKS-compliant, or SOCYSified, Many Unix Internet applica- 
tions are SOCKSified. Some Mac Internet applications work with 
SOCKS including Netscape Navigator and Peter Lewis’s Anarchie. 

Trying on SOCKS with Your Macintosh 

Speaking of our good fnend Peter Lewis, he has developed a rudi- 
mentary SOCKS server for the Mac. Named SOCKS, this applica- 
tion allows SOCKS records, embedded in network traffic, to pass 
once their source address has been checked against a list of permit- 
ted addresses. SOCKS has a rather crude interface; users have to 
edit SOCKS’s CONF resource with a resource editor such as 
ResEdit. This resource contains a list of IP addresses and IP masks 
for SOCKS to check when validating network traffic. 

The masks tell SOCKS which parts of the IP addresses are relevant. 
For example, you may have one address listed as 123.45.67.0 and 
the mask is 255.255.255.0. The SOCKS software will accept 
SOCKS records firom any address in the range from 123.45.67.0 to 
123.45.67.255. In this way, you can allow entire domains or sub- 
domains access through your firewall. This is important if your 
organization has a remote site; you may want to allow users from 
the remote site to gain access to your Intranet. This would be ac- 
complished by configuring the CONF resource to allow the subdo- 
main, or subnet, access to the server. SOCKS also maintains an 
activity log for you to use to troubleshoot any possible security 
breaches. 
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You can set up a Mac, running SOCKS as a rudimentary firewall for 
your Intranet, much like was diagrammed in figure 13.2. The rout- 
er would be configured to accept traffic on certain ports, such as 
those ports that transfer Usenet and email traffic, to your Intranet. 
All other traffic would have to be from SOCKSified applications 
and would be routed to the SOCKS server. 

Protecting YourTransactions 

Security within your Intranet is just as important as securing against 
threats from the outside. You may want to post Web pages that 
contain financial data or sensitive personnel issues. While HTML 
2.0 allows you to set up authentication form fields, these measures 
are easily compromised by sophisticated hackers. You may or may 
not have to worry about this threat within your organization, but 
there are measures you can take to add more security to your Web 
transactions. 



WebSTAR/SSL 

The Secure Sockets Layer (SSL) protocol has been proposed by 
Netscape Commimications to the Internet Engineering Task Force 
(IETF). SSL is a security protocol that provides privacy over the 
Internet. The protocol allows client/server applications to commu- 
nicate in a way that prevents eavesdropping, tampering, or message 
forgery. 

StarNine has introduced the WebSTAR/SSL, which provides se- 
cure Web transactions using the SSL protocol. This is a different 
version than the conventional WebSTAR we discussed in Chapter 
4. WebSTAR/SSL works very much the same as conventional 
WebSTAR, except that the URL prefix https:// is used rather than 
http://. Netscape Navigator provides SSL support so that you can 
establish secure Web connections to your WebSTAR/SSL server. 

Before you can use WebSTAR/SSL, you’ll need to obtain a digital 
ID from VeriSign, Inc. VeriSign is a company formed by RSA Data 
Security, Inc. and other investors. RSA Data Security is a company 
that provides public-key cryptography solutions; the RSA public 
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key encryption algorithm originated from this company. VeriSign 
distributes RSA-based digital signatures, or certificates, that act 
as means of authenticating mail messages and Web transactions. 

For more information on VeriSign and obtaining digital signatures 
for your WebSTAR/SSL service, look at VeriSign’s home page at 
http://www.verisign.com. Netscape (http://www.netscape.com) 
also maintains a series of tutorials on Web-based encryption 
practices. 

PGP 

You also may want to encrypt your email while allowing other users 
to decrypt your messages. This can be accomplished with another 
encryption algorithm known as Pretty Good Privacy (PGP). PGP is 
a high-security cryptographic software application that enables peo- 
ple to exchange files or messages with both privacy and authentica- 
tion. Only your intended recipients can read your messages. By 
providing the capability to encrypt messages, PGP provides protec- 
tion against anyone eavesdropping on the network. Even if your 
data is intercepted it will be unintelligible to a hacker. 

Furthermore, PGP provides the capability to digitally sign any file 
or message. PGP provides authentication and ensures the sender’s 
identity. 

PGP is based on the RSA encryption algorithm. Like RSA, PGP 
employs a dual key system. Whereas conventional cryptographic 
algorithms require a passcode or key to encrypt and decrypt a mes- 
sage, PGP users use one key to encrypt the data and a different key 
to decrypt it. Users often publish their encryption key, often called 
a public key, in email signature files or web pages. However, their 
decryption key, or private key, is kept private. These two keys 
work together; without the private key, encrypted data cannot be 
decoded. 

As a result of this process, PGP is somewhat inconvenient to use. 
However, MIT distributes PGP for various platforms, including the 
MacOS. MacPGP is available from MIT’s PGP home page; see the 
link at the end of the chapter. MacPGP is not included on this 
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book’s CD-ROM because of US export restrictions on PGP tech- 
nology. You can obtain the software from the home page listed at 
the end of the chapter. MacPGP also comes with an AppleScript 
that allows you to send and receive encrypted mail using Eudora. 

Summary 

You can implement the most sophisticated firewall, set up the fast- 
est SSL Web server, and distribute PGP to your users. However, 
none of these measures will bulletproof your Intranet without your 
having a firm idea how secure you want to make your network. You 
cannot protect against stupidity, so you will have to endow your 
users with the same secure mentality that you have. For example, 
your users should not distribute system passwords, bring in floppy 
disks from other systems, or exchange system information with 
people outside your Intranet. No matter how innocuous you think 
your network may be, it makes a wonderful and insidious jump 
point for a thrill-seeking hacker to exploit. 

The next chapter. Chapter 14, ‘‘Sample Intranet Applications,” 
discusses several customized applications that you can develop for 
your Intranet using a lot of the tools covered in the previous chap- 
ters. Before going to this chapter, you may want to go back and 
review some of the relevant chapters that contain material discussed 
in Chapter 14. Some relevant chapters include the following: 

□ Chapter 4, “Macintosh HTTP Servers,” to learn about the 
different software you can use to set up World Wide Web 
services on your Mac. 

□ Chapter 7, “Writing CGI Scripts,” to learn about writing 
scripts for your Web site. These scripts allow you to process 
data from HTML forms and return customized Web pages. 

□ Chapter 9, “Beyond HTML,” to learn about some techniques 
to spruce up yoiu* Web site beyond just using conventional 
HTML and graphics. We’ll discuss Java, RealAudio, and other 
cool topics. 
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□ Chapter 10, “FTP Services,” to learn more about setting up 
FTP services on your Macintosh. 

Links Related to This Chapter 

Mac Web http://www.forest.net/advanced/ 

Security Challenge securitychallenge.html 

WebSTAR/SSL http://www.stamine.com/webstarssl/ 

webstarssl.html 

VeriSign http://www.verisign.com 

MIT’s PGP http://web.mit.edu/network/pgp 

Home Page 

RSA Home Page http://www.rsa.com 







Sample Intranet Applications 

At this point in the book, you have all the tools you need to estab- 
lish a self-sufficient and productive Intranet. You’ve been intro- 
duced to many concepts and applications that you can adopt and 
utilize for your private use, and my hope is that you’ve been getting 
ideas to adapt many of these for your company’s use. 

This chapter will discuss some new types of applications that you 
can offer to your Intranet users. As Intranets are springing up all 
over the corporate world, developers are creating specialized prod- 
ucts for this new market. 

Other Intranet applications discussed here, however, are derived 
from the subject matter presented earlier, such as Web service, CGI 
scripting, and FTP service. As an administrator, you’ll utilize the 
open environment of the Intranet to develop new and customized 
tools. You, or a team of developers under your direction, will con- 
struct Web pages, program CGI scripts, and develop sophisticated 
databases — all for the purpose of meeting specific needs within your 
group. The advantages of the applications you’ll be developing arise 
from their open architecture and cross-platform accessibility. You’ll 
be serving these programs from your stable of Macs, but you’ll be 
able to ser\ice clients using a variety of operating systems. 

You can add the following capabilities to your Intranet: 

□ Group scheduling to allow your users to set up meetings and 
allocate resources, such as conference rooms and multimedia 
equipment 

□ Videoconferencing, which is the next best thing to being 
there 
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□ Bulletin boards to develop thread-based chat groups on 
your Intranet, allowing users to communicate and share 
information 

□ Ideas for Web-based management applications that you can 
develop 

Group Scheduling 

Pm sure you’ve encountered the frustrating situation that arises at 
the end of meetings when you’re gathered around a table and try- 
ing to decide when to schedule the next meeting. It’s difficult to 
coordinate schedules, especially when half of the people you need 
to be there aren’t there. What’s worse is that half of the people who 
are at the meeting probably forgot their personal calendars and 
have no way of knowing who’s available at what time. After you’ve 
found a time that everyone can meet, you’ve got to find a room for 
the meeting. There’s got to be a better way to do this, and there is; 
it’s CdiXcd^roup schedulin£i. 

Group schedulers are like the personal calendar appUcations that 
you’ve probably used on your Mac for years; however, group 
schedulers are calendars that talk to one another over a LAN or 
even a WAN. You can propose meetings by having the scheduler 
select a time that all of the desired members are available. Some 
schedulers even allow you to incorporate the availability of resourc- 
es such as conference rooms and overhead and projection panel 
displays. 

Meeting Maker XP 

ON Technology’s (http://www.on.com) Meeting Maker XP, or 
simply Meeting Maker, is a popular group scheduler application. 
Originally developed for the Mac, Meeting Maker is now a cross- 
platform application (hence the sufHx XP) usable on the various 
DOS and Windows platforms, the MacOS, OS/2, and certain fla- 
vors of Unix. 







Chapter 14 



Sample Intranet Applications 



403 



NOTE 






Meeting Maker allows you to store offline versions of your person- 
al calendar on personal digital assistants such as Apple's Newton, 
the Sharp Wizard, and even the Timex Data Watch! 



Like a lot of the software discussed in this book, Meedng Maker is 
a client-server application. You run a Meedng Maker server on a 
spare Mac, PC, or Unix workstadon. You then sprinkle Meedng 
Maker client applications throughout your Intranet. The Meedng 
Maker clients can work offline or connect to the server to do group 
scheduling. Let’s take a look at some of the specific features of 
Meedng Maker. 

Scheduling a Meeting 

Setdng up a meeting with Meedng Maker is a simple task. Figure 
14.1 depicts a recendy created meedng that was set up by clicking 
on a start dme and dragging the mouse to the desired meedng end 
dme. When establishing the meedng, a dialog box will appear simi- 
lar to that shown in Figure 14.2. In this dialog box, you can fine 
tune the start dme, duradon, the frequency of the meedngs. 




Figu re 1 4. 1 Schedulin0 a meeting with a group scheduler like 

Meeting Maker can be done with a simple click and drag. 
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5/16/96 



Time: | 8 :30 AM | Duration: | 1 ;45 | [ All Day 



[Frequency... ] Thuradeg, May 1 6, 1 996 8;30 AM to 1 0:1 5 AM 
[Notes Supply a deacriptlon of the activity's purpose. 

jPptlons"^ Sat tha rami ndar and label for this activity. 



□ Priuote 

□ FleHibie 



[ Inulte Guests ] ([updat^^ 



Figure 1 4.2 Although you can create a meeting by clickin£i and 
dra£i£fin£i on the calendaVy you can fine tune the start timey dura- 
tiony and frequency of the meeting by using this dialog box. 



Inviting Guests to Your Meeting 

Clicking on the Guests button enables you to invite a series of 
guests, by bringing up a dialog box similar to that shown in Figure 
14.3. These guests are users like yourself who have accounts within 
the Meeting Maker server. All you need to do to invite guests is 
select their names and then click on Required or Optional buttons. 
After you send the request, guests will receive messages asking for 
their participation in your meeting; these guests can reply positively 
or negatively. The meeting will be established if all required guests 
can attend; refusals from optional guests won’t prevent the meeting 
from being established. 

Note that after you invite guests to your meeting, the tabs on the 
left side of the dialog box change names and new tabs appear. Now 
you can fine tune the scheduling of the meeting, and you can see 
how it appears on the personal calendars of your guests. An exam- 
ple of this is depicted in Figure 14.4. 



NOTE 



O 



Clicking on your guest's names brings their personal schedule into 
the window in the Schedule dialog box. 
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Figure 14.3 Tou can invite other users^ or optional jjuests^ who 
have accounts on your Meeting! Maker server to your meetin£fs as 
required. Similar to emails you can notify £fuests of your meeting 
throu£fh carbon-copy or blind carbon-copy notificaion without actu- 
ally inviting them. 




Figure 1 4.4 After you^ve invited guests to a Meeting Maker meet- 
ingy you can graphically fix the meeting's schedule and duration 
and compare it to other guests^ calendars. 



Customizing Your Meeting Request 

You can include an agenda with your meeting request, as shown in 
Figure 14.5. You can include existing text files into your agenda, or 
you can save your agenda as a text file for future referral. Figure 
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14.6 shows some of the options you have in setting up meeting 
reminders and classification. If you’re sitting at your desk while 
Meeting Maker is open, you can have Meeting Maker remind you 
of the meeting shordy before it is to take place. You can assign a 
predetermined time to be reminded of the meeting. Finally, you 
can specify what sort of label to fix to the meeting. Just like the 
System 7.5 Finder lets you fix colors and labels to icons, you can set 
up classifications and labels to differentiate between your meetings. 




Figure 1 4.5 Tou can include an a£fenda in your meetin£f requests. 
Instead of typing an agenda in this text field, you can include text 
from a file. 




Figure 1 4.6 Using Meeting Maker, you can customize your re- 
minder options, as well as classify your different meetings accord- 
ing to pre-set labels. 
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Sending the Proposal 

When you’ve configured your meeting properly, you click the Send 
Proposal button. Your guests receive notice of the meeting if their 
Meeting Maker application is active. Recent versions of Meeting 
Maker actually incorporate notification through SMTP mail. This is 
relevant, as your users will likely check their email more often than 
they will their Meeting Maker application. 



other Meeting Maker Features 

As many of your Intranet applications are based on TCP/IP, you’ll 
be relieved that Meeting Maker does as well. Therefore you will not 
have to configure your hardware to distribute different network 
protocols. Furthermore, after you’ve established dial-in service for 
your Intranet, your users will be able to dial in from home or 
through remote sites. 




.Meeting Maker also ehabtes.you to connect to a server via Appje- 
talk, birt this means thatTn addition to yoiir normal Intranet dial-in 
service, you'll need to configure service which allows your remote 
users to work with AppleTalk. See Chapter 2, "Wiring Your Intra- 
net," for more information about Apple Remote Access. 



Videoconferencing 

I don’t know about you, but on my job, I spend a good amount of 
time trying to explain things over the phone. I usually end up 
drawing a figure and faxing it to people on the other end of the 
phone. They end up sending back faxes, and I respond with even 
more faxes — all this eats up a lot of time. 

Similarly, there are several conferences or meetings for which I’ve 
had to travel some distance. Sometimes the meeting lasts only a few 
hours — much less time than it took for me to travel there. That 
makes for an expensive meeting in terms of time and labor. 

Many companies are looking at videoconferencing as an alternative 
to conventional travel for meetings. Videoconferencing actually is a 
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big business nowadays. Few companies can sponsor ^ideoconfcr- 
encing inhouse because of the facilities required. Smaller companies 
usually contract out to special conferencing sites that provide rea- 
sonably high-speed audiovisual communication. 

Depending on your network hardware, you can provide rudimenta- 
ry videoconferencing services within your Intranet. With some ad- 
ditional inexpensive equipment, your users can videoconference 
across your Intranet and even beyond to the Internet. This section 
looks at one application that allows you to set up this unique form 
of telecommunication. 

Videoconferencing with CU-SeeMe 

CU-SeeMe is a freeware videoconferencing application distributed 
by Cornell University (available at http://www.cu-seeme.com). 

For several years, Mac and Windows users have been able to use 
CU-SeeMe to get video feeds from various video services on the 
Internet. CU-SeeMe also can be used, unlike a lot of the software 
discussed in this book, as a client-client application. With appropri- 
ate multimedia hardware, such as a video camera and microphone, 
you can send and receive audio and video over the Internet to oth- 
er CU-SeeMe users. 




You can connect to NASA Select, NASA's video reflector service, 
at 139.88.27.43. 



You can imagine the network bandwidth required to run CU- 
SeeMe over a small network. Many network administrators have 
banned videoconferencing products like CU-SeeMe from their 
networks. White Pine Software (http://vvvvvv.vvpine.com) has de- 
veloped a commercial version of CU-SeeMe known as Enhanced 
CU-SeeMe, which is geared to be a better network citizen than the 
freely distributed CU-SeeMe. While your Enhanced CU-SeeMe is 
geared to run over a LAN, you can use the application to receive 
video transmissions with a 28.8 modem. 
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Alternatively, you can use just the audio capabilities of CU-SeeAAe 
with a 1 4.4 modem. It seems somewhat counterproductive, how- 
ever, to spend money on equipment for an Intranet just to let 
people talk through their computers. 



Enhanced CU-SecMe, which wc’ll refer to as CU-SeeMe for die 
remainder of this section, uses a special algorithm to compress and 
decompress the multimedia data. This is done without the need of 
special hardware such as audio-visual (AV) boards that would nor- 
mally go into high-end desktop computers. 



CU-SeeMe Reflector Services 

One unique feature offered by CU-SeeMe is reflector service. This 
technology offers video broadcasts to concurrent users anywhere 
on the Internet or throughout your Intranet. Using a reflector 
server, you can serve multiple users (White Pine claims as many as 
100) from a single server. This allows users on your Intranet to 
confer and collaborate, from remote sites, on shared documents 
and other media. You can concatenate, or daisy-chain, a series 
of reflector servers to provide wide-area broadcasting for large 
audiences. 

While CU-SeeMe reflector software is available on several Unix 
platforms and Windows NT, it is not available for the MacOS as of 
this writing. The reflector service offers a client-server approach to 
wide-scale videoconferencing. 



Hardware Required for CU-SeeMe 

As mentioned earlier, CU-SeeMe is a peer-to-peer videoconferenc- 
ing tool. Therefore, you’ll need to provide the necessary hardware 
for your users to utilize the software. As of this writing, CU-SeeMe 
runs under Windows and Windows 95 as well as on 680x0-based 
Macintosh computers and Power Macs. Your PC clients will need 
an 8-bit sound card with a microphone input. They’ll also need 
microphones and video cameras; I’ll talk about the video cameras 
later. For your Mac clients, CU-SeeMe only requires System 7; 
however, it also requires software distributed with System 7.5. The 
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Mac’s onboard audio and video hardware are sufficient to run 
CU-SeeMe. Microphones are included with most late-model Power 
Macs; your 680x0-based Mac users most likely have microphone 
jacks but may not have had microphones bundled with their 
machines. 

If your company maintains a stable of video camcorders, such as the 
ones commonly found in electronics stores, you can use one of 
these for sending video and audio. However, both your PCs and 
Macintosh computers will need special AV cards to work with your 
camcorders. Another innovative and inexpensive solution is Con- 
nectix’s QuickCam and Color QuickCam. The QuickCam is a no- 
fiills video camera that unobtrusively sits on top of your monitor; 
the Color QuickCam, which displays and sends 24-bit color, is 
more expensive than the black-and-white QuickCam. You just 
point the camera in one direction, plug the other end into the serial 
port of your Mac or PC, and start broadcasting. You don’t get the 
resolution and controls that you’d find on a more expensive cam- 
corder and video card system, but at $300, even the Color Quick- 
Cam is an affordable plug-and-play videoconferencing tool. 

Using CU-SeeMe 

Double-click on the CU-SeeMe icon. You should see an array of 
status indicators similar to that shown in Figure 14.7. You’ll be 
asked for the name of your local window; this name will be shown 
on other users’ displays. If you have a video source hooked up, 
you’ll see the output in the local window. The Audio window con- 
tains controls on your microphone and on your speaker. You can 
modulate the input level of your microphone and the volume of 
your speaker output. 

Now it’s time to videoconference. First, connect to another user. 
Hopefully, you’ve made arrangements with another user to set up a 
videoconference. In the conference menu, select Connect. 
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NRSRTU 



Local window- 






:nudio 



lOKbp* 



Audio window- 



Participant list 



V lurfcTs (4) 

T8una2av>»ttop<n ® 
iSaiin MtchaelJDttlbg jj<l| 



Merrill Ohncmus ® 



JentM C. Radford 



Remote window 



Participant list 



Figure 1 4.7 It^s the next best thin£ to bein£i there. CU-SeeMe 
£fives you several displays with which to control your audio and 
video processing!. 



A dialog box pops up similar to that displayed in Figure 14.8, and 
it asks you the IP address of the remote user with whom you wish 
to conference. Enter the IP address and the conference ID. The 
conference ID should be zero, unless you intend to restrict odier 
users from connecting. If they’re running CU-SeeMe, your desig- 
nated users will receive an alert message that you’re trying to 
conference. At that point diey can either accept or deny your re- 
quest to conference. Once the conference is accepted, you’ll be able 
to see and speak to one another providing you both have checked 
the I Will Receive Video box (shown in Figure 14.8). You’ll have 
to adjust your brightness and contrast controls on the window’s 
slide bar. 

If you have set up a reflector on a Unix or Windows NT server, you 
can enter that server address. Now you can really restrict other 
users by issuing a non-zero ID. You’ll be able to display up to eight 
other windows. You can select the users from the Participant list 
window. You’ll be able to receive video from any participant who 
does not have an ‘X’ by his or her name. These users are known as 
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lurkers. You may wish to establish a conference with lurkers who 
may not be able or may not desire to display video. 



Connect I 



Connect to... 
IP Rddress: 



Conference 

10: L_ 



□ I uiUi send uideo 
IS I tuin recetue uideo 



[ Cancel ) fconne^ 



Figure 1 4.8 Enter the IP address of another user running 
CU-SeeMe to initiate a conference request. 



White Pine has included a list of preconfigured reflectors, as shown 
in Figure 14.9. Just click on the Conferences menu and select the 
Connect To sidebar. You can edit the names and IP addresses of 
these services, and even add new listings, by dragging on the Edit 
menu down to the Edit Preferences sidebar. 



88K 



Stop Sending Video 
Stop Receiving Vided 



Audio Window 
Open Slide Window 



St/f 



White Pine Software 
Cornell Univ. 

KJHK 

NASA Select 
KBR-TV 

CMUARPA Speech 

CVtUGSIA 

C.NJJ).R. 

GTEfkyhawk 
inditma State Univ. 
laUNChpadEBBS 
Network Sohitions 
N. Carolina State Univ. 
NYSERNet 
Ohio State Univ. 

Penn State 
Univ.HawaD 
Univ. Kansas 
Univ. fVQchlgan 
Univ. Penn 
Univ. Texas 

VA Commonweath Univ. 
(Australia) Univ of Melbourne 
(Finiond) Univ. Vaasa 
(Greece) Uidv. Thessaloniki 
OloDamf) Ronerdam Mgmt. 
(Ireland) Univ. Ulster 



Figure 14.9 White Pine offers a list of preconfi 0 ured video reflec- 
tor services for you to sample. 
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NOTE 






o 



Connecting to the NASA service enables you to receive NASA 
Select, which is NASA's public relations cable channel. Several of 
the preconfigured servers reflect NASA Select. 



Using CU-SeeMe as a Web Browser Helper Application 

You actually can launch CU-SeeMe from a Web browser. To do 
this, you need to configure the Web server and browser to interpret 
a certain MIME type as a CU-SeeMe application. If you are run- 
ning MacHTTP, enter the following lines in the MacHTTP.config 
file. 

TEXT .CU * * application/x-cu-seeme 
TEXT .CSM * * application/x-cu-seeme 

These lines mean that you will need to use the cu or csm prefixes 
on your configuration files. Second, configure your Web browser 
to launch CU-SeeMe when recemng a file of MIME type 
application/x-cu-secmc. 



NOTE 









In addition to configuring your Web server with the new CU- 
SeeMe MIME type, users will have to configure Navigator or any 
of the other browsers in order to launch a videoconference via the 
Web. It's a good idea to post instructions on your Web page de- 
tailing how to configure the major browsers (Navigator, Internet 
Explorer) with this MIME type. 



Now create a file called test.csm. The following lines need to be in 
this file: 

server_address 

conference_id 

file_options 

The file_options variable can contain a variety of options. Look in 
the Web launch file in the CU-SeeMe distribution folder for a com- 
plete list. However, a simple test.csm file could be set up as 
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192.80.72.4 

0 



Accessing this file through a Web browser would then launch CU- 
SeeMe on White Pine’s public reflector service. 

You could link a series of CU-SeeMe files to a Web page associating 
them with different reflector servers. This would be one way that 
you could establish an easy means of setting up videoconferences. 
Telling coworkers to access a (hypothetical) URL http:// 
wwwl4.anyplace.com/CU~SeeMe/confl .csm at a certain time 
would enable them to launch CU-SeeMe at the same server for a 
predetermined videoconference. 

Bulletin Board Software 

People congregate around electronic discussion groups, just as they 
do around the bulletin boards in your company’s hallways. For 
many years, Usenet has been a popular forum for the exchange of 
ideas and concepts. Many organizations supplement their normal 
Usenet feed with local newsgroups pertaining to local interests. 
Running a Usenet server is problematic, as the sheer volume of 
traffic can amount up to 500 MB per day. You need a fast network 
connection and an abundance of disk space to accommodate a 
newsfeed. You also need a Unix workstation; there are no Usenet 
servers for the MacOS as of this writing. 

Another alternative to the conventional Usenet feed is Web-based 
bulletin board software. Users can track discussion groups and indi- 
vidual postings, much as they do with Usenet. However, with a 
Web browser interface, users can click View More Information 
about the author and activate links inside the messages. Further- 
more, running a Web-based bulletin board solution obviates the 
need for running a Usenet server. 



ICD-ROA 



Web Crossing 

There are many Web- based bulletin board applications for the 
MacOS, but we’ll talk about one in particular in this section. Web 
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Crossing (WebX) is a Web-based bulletin board application which 
functions much the same as a Usenet newsreader. As it’s actually a 
CGI application, Web Crossing runs on your Mac in conjunction 
with WebSTAR or MacHTTP. For the sake of discussion, I’ll as- 
sume you’re running WebSTAR, although the same instructions are 
applicable if you run MacHTTP. You’ll get almost the same func- 
tionality from running Web Crossing with MacHTTP as you would 
with WebSTAR, except that MacHTTP will not let Web Crossing 
display images of the message authors. 

Web Crossing actually runs like a BBS system with an administrator 
who can modify user preferences and login information. Users log- 
in to the system, which provides a measure of security. Like Usenet, 
discussion folders can be formed based on certain topics. Web 
Crossing also allows the user to edit and/or delete the message 
after it’s been posted. This is one advantage of WebX over conven- 
tional Usenet. 



Installing and Configuring Web Crossing 

Double-click on the WebX icon. Web Crossing uses a different 
installer setup than most of the applications that we’ve used in this 
book. When inside the installer, drag the WebX icon to the hard 
drive icon to unpack the software. 

Once the software has been installed, find the Web Crossing folder 
and move it to the desired location. Take the Images folder and 
move it to your WebSTAR folder. If you already have an Images 
folder, rename the WebX images folder to something else. When 
you initialize WebX for the first time, you’ll be queried as to the 
exact location of the folder. 

Make an alias of the WebX application and put it with the rest of 
your CGI scripts and applications. Now enter the following URL 

http://<your server name>/<your CGI path>/WebX 

to start up WebX. WebX will lead you through a set of pages de- 
signed to customize the application. You’ll be queried for the actual 
location of the WebX images folder, as shown in Figure 14.10. 
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You’ll reload this page until the test graphics become visible, as 
they are in the figure. WebX uses these images throughout the bul- 
letin board. These images represent buttons that perform certain 
functions, such as creating a new message, creating a new discus- 
sion topic, emailing the sysop, and other actions. 




Figure 14.10 When entering the location of the WebX images 
folder^ don^t forget to include special character codes for spaces and 
non-standard characters. 



In the following pages, you’ll be asked to set preferences for the 
root account, which WebX refers to as sysop. You’ll be asked for 
your email address. WebX will provide it to users who want to con- 
tact you with problems or lost passwords. Similarly, you’ll be que- 
ried for the sysop password that you’ll need in order to configure 
system and user parameters. 

If you login to WebX as sysop, you'll see an extra button at the 
bottom of the page labeled Control Panel. Clicking on this button 
yields a great deal of documentation as well as a wide variety of 
options that you can use to customize the appearance and opera- 
tion of the bulletin board. 
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After you’ve finished configuring the sysop privileges, you’ll be able 
to add users. This actually can be done by die users themselves, as 
demonstrated in Figure 14.11. WebX will ask for user information 
such as email address, descriptive text, home page URLs, and even 
a snapshot of the user. This snapshot can then be appended to each 
message posted by the user. 



I Netscape: iileb Crossing Demo - Neui User Registration 



8<ck Hom» j R*k»d [ | Opto } Brtet ( f<od | Sioo { 

t Vhit 5 Cool? ( Hjfxgwok | H»< S»ycl> j N»t Dfcrtctory j Softvy j 



WebYCrossing’ 






New User Registration 

Please register fay completing all spaces in this form. 



Your name (First then Last); |toloia aathcny 



Choose a password: ]•••••• 



Your Email address:[ tobiadpobox. oam 






Web^Crossing enabled 



I 

O' 









Figure 14.11 Users must register with WebX before rectdin£i or 
posting new messages. 



Creating Messages with WebX 

To create a new discussion group, simply click the Add Folder but- 
ton. You’ll be queried for the folder name and a description of the 
discussions to be contained in the folder. A WebX discussion is anal- 
ogous to a Usenet thread^ threads and WebX discussions contain 
messages of similar content. Once a new folder is established, it can 
be populated with discussions. You can begin to create a message 
by clicking the Add Discussion button at the bottom of the Web 
page. Then add the discussion title and descriptive text in the re- 
spective text fields. 
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After you’ve created a discussion, you can start posting messages to 
it. As shown in Figure 14.12, you can create a message using an 
HTML text field. WebX allows you to use plain text to construct 
the message; however, you can also include parts of previous mes- 
sages and even HTML. This is important since you’ll then be able 
to embed hyperlinks in your messages. 




Netscape: Uieb Crossing Demo - Add Discussion 



Discusdont ore like &n electxonic meeting room, where eny number of 
messages to contribute to a discussion. These messages are kept for the 1 
discxission. 



New discuseion tille: [vho's got the tiokaU 



New disruerirm deKxipdon: Your text will be formatted and displayed using HTML . You 
can xise the quick-edit formatting features: (blank line) • parag^ph oreak. b • bold, i - italic, c 
- center, * • bulleted item, ] - indented, > - quote. You can add a reference to a previous 
message.l tryijig to tied oat ako’t got tickati to tKa gawf 



^ Show your name and picture in the disciission heading 



Add 

Wsoosstoo 



Figure 1 4.1 2 Tou can post messa£[es usin£f the simple text field. 
However^ you can add special characters and even HTML to your 
messa£fes. 



Figure 14.13 shows the results of a posted message. WebX displays 
the author’s picture next to the text, if the user, preferences have 
been configured to do so. 
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Figure 14.13 Images of the smiling message author can accom- 
pany the messapfes. Clickinpi on the author^s ima^e brings up a page 
filled with personal information about the message author. 



Specialized Web-Based Intranet Applications 

The three applications discussed in this chapter are commercial 
offerings that you can use to supplement more open services on 
your Intranet. Many of the applicadons that you develop for your 
Intranet may be home-grown. You have several tools at your dis- 
posal in terms of HTML, CGI scripdng languages, Java, JavaScript, 
database languages, and others. Many of these tools are both cross- 
platform and adhere to an open architecture. You’ll be able to ex- 
change applicadons with server administrators running the MacOS 
and other platforms. 
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In this section. I’d like to get you thinking about some of the prod- 
ucts you can develop for your Intranet. Sure, you’re limited by the 
rudimentary typesetting capabilities of HTML or the simplicity of 
JavaScript, but these tools will mature with time; hopefully, you’ll 
be able to adopt new technologies as they develop. 

I’m not going to go into the specific development of these prod- 
ucts. I’ll leave the HTML, CGI, and Java development up to you 
and other texts which can go into greater detail. Please refer to the 
preceding chapters or the appendices for more specific detail. 

Timecard System 

Companies and organizations have struggled with the concept of 
online forms for several years. Until recently, there was no viable 
standard with which you could replace office paperwork with elec- 
tronic equivalents. The problems stemmed from reliability and lack 
of cross-platform solutions. 

The forms capability in HTML offers you a rudimentary means of 
providing online forms. HTML 3.0 will offer more flexibility in this 
area. The basic idea with an HTML forms-based application is for 
you to do the following: 

□ Provide a cross-platform means for the user to enter data 

□ Process the data internally 

n Relay the data to a person or database in a format where it can 
be implemented or archived 

This list should describe virtually any online system that you 
develop. 

For a timecard system, you’re looking for the employees to be able 
to do the following: 

□ Enter their hours and associate these hours with certain 
charge numbers 



□ Be able to see the total charges for each pay period 
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□ Process the data internally so that the charges are accumulated 
according to your bookkeeping methods 

□ Transport the processed time charges to the administrative 
staff 

□ Allow that person to rewew the time charges before further 
processing to personnel involved with your group’s payroll 

Now take a look at how you can develop these individual steps. 



Developing the Online Timesheet 

You’ll need to develop an HTML form which is flexible enough to 
have enough text entry fields for the different days in your pay peri- 
od and be able to track them according to charge numbers. As your 
users may have multiple charge numbers, you’ll have to accommo- 
date a varying number of charges. 

You can develop this form by using a series of HTML FORM state- 
ments. It’s a tedious but straightforward exercise in HTML pro- 
gramming, but one that is made easy with an editor like HTML 
PageMill (see .^pendix C, “Perfecting HTML,” for a discussion of 
Adobe PageMill). There are several ways you could do this, but one 
option is to establish a small text entry field for each day for each 
charge number. For example, if you have 10-day pay periods and a 
user is charging time to three different tasks, you’ll need at least 30 
different text fields. You may want to allow the capabUity to charge 
personal and sick leave in addition to overtime, compensatory time, 
or time worked on the weekends. 

You’ll also need to provide a digital signature capability to prevent 
firaudulent time sheets. This capability can be provided using Web- 
STAR/SSL, as mentioned in Chapter 13, “Intranet Server Securi- 
ty.” WebSTAR/SSL provides you with a means to incorporate 
digital signatures with your Web pages. You can review this tech- 
nology to vmderstand how to secure your timesheet transactions. 
However, a user will need to be able to enter a digital signature 
somewhere on the form to provide verification. Furthermore, you 
may wish to add additional signature capabilities for supervisors. 
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No Mac-based browsers support user-certificates yet, although 
Navigator might support this feature by the time you read this. A 
user-certificate is necessary for this kind of authorization. For more 
information on user-certificates consult VeriSign’s home page 
(http://www.verisign.com) or read Chapter 13, "Intranet Server 
Security." 



Accumulating the Charge Data 

Depending on how your organization works, you’ll want to formu- 
late the employees’ charge data in several ways. Let’s assume tliat 
you want to sum the work hours by charge number. There are wo 
ways to do this — the easy way or the cool way. Let’s look at the 
easy way first. 

You can develop a Frontier, MacPerl, or AppleScript CGI script to 
do the simple addition of work hours for each charge number. 
Frontier might work best, as you can express the hours worked 
each day as an element in an array. The user enters the data and 
presses a Submit button of some kind. The array elements would 
then be summed and presented back to the user in another HTML 
page. The user then reviews the data and presses another Submit 
button to pass the data on to an administrative aide. If the data 
were entered incorrectly, the user could move back to the time 
sheet to correct the error. 

The cool way to do this would be using Java. You could develop a 
Java applet which would automatically sum the hours worked and 
present them on the same page. Much like a spreadsheet, as the 
user entered the hours, a running sum would be kept at the end of 
the row. This would obviate the need for a CGI script to process 
the data and return it through another HTML form for the user’s 
inspection. Using Java, the code would do all die arithmetic that 
you would have had to program a CGI script to do in the above 
paragraph. This saves you connection and processing time and re- 
duces the load on the server. You’ll still need a CGI script to move 
the data to the next step along the process. 
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NOTE 




^ JavaScript may be more appropriate for this timecard example 
than Java. JavaScript bfilere a more direct means of accessing form 
entries. 



For more information on working with Java, see Hayden Book’s 
Teach Yourself Java in 21 Days for the Macintosh. 



Packaging the Data 

You’ll need to sum the data up by charge number. If you took the 
conventional CGI route, you’ve already summed the data when the 
script presented the data for review by the user. With the JavaScript 
applet approach, the summed work hours are displayed in certain 
HTML text fields. 



Transporting the Data to a Third Party 

Someone should review this data for accuracy or verification. This 
could be accomplished by developing a CGI script that takes the 
time charge data and inserts it into a mail message directed toward 
that user’s supervisor. There are ample MacPerl, Frontier, and Ap- 
pleScript CGIs which expedite data-to-email conversion. One prob- 
lem with doing this by email is that you’ll need to encrypt the data 
and enable the supervisor to attach a digital signature. This can be 
done but it requires the use of Eudora and MacPGP. 

Another way would be to package the data within a Buder SQL 
database and develop HTML forms pages using Tango. In this way, 
you could avoid doing any of the SQL or HTML programming 
necessary to align the data into online forms. Supervisors could 
periodically peruse a secure Web page that maintains all the differ- 
ent employee time charge data. Digital verification could be afford- 
ed to each entry as a means of authorizing that employee’s time 
charges. 

Cutting Paychecks 

After the supervisor has authorized the employee’s time sheets, that 
data could be emailed to a payroll processing staff member. 
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Alternatively, it could be displayed using another secure Tango- 
derived Web page. Your next challenge would be to develop an 
interface between either the secure email or the secure Web page 
and your payroll processing software. There’s a good chance that if 
you’re using a third-party payroll software package, the vendor may 
have a solution for you to implement with your Intranet services. 



Document Archives 

Another mundane but vital resource within your organization is a 
document library. I’m sure that memoranda and technical reports 
are stored somewhere in a deep dark recess of your building, with a 
disgruntled librarian guarding the contents. However, there are 
solutions that you can incorporate which allow you to make much 
of documentation available online. 

If your organization is modern enough to be interested in setting 
up an Intranet, there’s a good chance that much of the paperwork 
your group has generated over recent years is available in electronic 
format. Many of these documents may be in a cross-platform for- 
mat such as FrameMaker, PDF, or MS Office. These documents 
could then be stored in a Butler database and accessed by using 
Tango-derived Web pages. Butler SQL can store elements as large 
as your largest documents (2 GB of data), and you’re limited only 
by your peripheral equipment such as hard drive space. 

Your group librarian would then take the documents, incorporate 
them into a Butler database, and then update the Tango interface 
to make them accessible online. You would have to provide for 
several fields of information so that you could perform searches of 
the databases. Although we covered text searching with TR-WWW 
in Chapter 8, “Databases and Document Searches,” many of your 
documents will not be comprised of strict text. You could use Ap- 
pleSearch to search through the documents, but for large libraries 
this could be a cumbersome proposition. Furthermore, many of 
your documents might be composed of graphics, which have no 
text to search. For these reasons, you’ll need to add extra fields in 
your Butler database to accommodate searchable criteria such as 
authors, keywords, and other relevant information. 
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Software Archives 

Another related service you can provide is in the area of software 
archives. Many large organizations have some archives of site- 
licensed or inhouse software for use by their employees. You can 
set up an FTP server that works in conjunction with your Web ser- 
vices. If users want to download a new version of an application, 
they could step through a verification process on a Web page. The 
final result would be for the users to receive the file by initiating an 
FTP connection through clicking on a Web page link. You could 
even develop a simple CGI script that tracks the usage and down- 
load activity of the server. 



Summary 

The number and types of applications that you can write for your 
Intranet are limited only by your resources and your imagination. 
The Web, Java and JavaScript, CGI scripts, and other tools offer 
you a great deal of flexibility in developing applications that your 
organization can use. With the Intranet market heating up, the 
future will undoubtedly bring new and different tools that you can 
use to create even more specific utilities for your Intranet. 

You’ve learned enough about programming and hardware to at 
least learn how much you don’t know about setting up an Intranet. 
There’s a great deal more to learn, and you’ll learn it by charging 
ahead, setting up servers, and creating yoiu: own Intranet utilities. 
Feel free to go back and visit any of the preceding chapters to re- 
view any topics or discussion. In the appendices, we’ll talk about 
some of the software included on the book’s CD-ROM as well as 
other ancillary issues. Specifically, you can read the following ap- 
pendices: 

□ Appendix B, “Establishing an Internet Presence,” to learn 
how to convert or adapt your Intranet skills and resources to 
pubhsh Web pages and establish FTP sites that are geared 
toward the Internet community. 
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□ Appendix C, “Perfecting HTML,” to learn about some ad- 
vanced HTML programming features as well as how to use 
some popular HTML editors, including Adobe PageMill and 
BBEdit. 

Links Related to This Chapter 

ON Technology http://www.on.com 

White Pine Software http://wviw.cu-seeme.com 

Connectix http://www.connectix.com 

Lundeen & Associates http://www.lundeen.com 





CHAPTER 




Summary 

The Intranet concept has the capacity to change your way of doing 
business more than any single advance since the personal computer. 
You now have the tools and knowledge to create customized 
applications by using open technologies that will fulfill the long- 
heralded promise of the paperless office. In fact, you can add servic- 
es, such as database access and document searches, that really have 
no parallel in the conventional office environment. 

In contrast to the horrendous press Apple has been getting at the 
time of this writing, the Mac platform is going to be around for a 
long time. The wealth of Intranet applications available for the 
MacOS is staggering. The ease-of-use that makes the Mac so near 
and dear to all our hearts has allowed millions of users to move out 
and conquer the Internet. As we stand on the threshold of the age 
of the Intranet, we can see by the versatility of the tools covered in 
this book that the Mac will be a player in this new paradigm as well. 

I hope this book put a lot of pieces together for you. It’s unlikely 
that you were able to absorb all the material presented here, but 
extensive information was given to point you toward the resources 
you may need to master the software described in this book. As the 
environment described in this book changes so rapidly, you’ll need 
to keep abreast of tlie new technologies to provide the highest 
quality service to your users, while still making your Intranet an 
essential yet fun place to be. 



And isn’t that what this is all about? 
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What's on the CD-ROM 



At the end of almost every chapter in this book, IVe included a list 
of relevant URLs. I’ve accumulated and organized these in a 
Netscape Navigator bookmark file that you can retrieve from the 
WWW site associated with this book. This site is located at http:// 
www.hayden.com/internet/intranetmac and contains files and 
other links relevant to the subject matter covered in this book. 

The software described in this book is contained in a folder entided 
Intranet Apps. This folder contains shareware, freeware, and demo 
versions of commercial applications. Your purchase of this book 
does not remove your obligation to pay your shareware fees. Think 
of this book’s CD-ROM as a very mobile and very fast software 
archive. Just as you’re obligated to pay for shareware you pull from 
an FTP archive, you are likewise obligated to pay for the shareware 
found on this disc. 



The lightning pace of the Mac Internet environment has all but 
guaranteed that some of the software on this CD-ROM will be 
obsolete by the time you read this. You might want to check the 
Web and FTP sites associated with the various demoware and 
shareware applications on this CD-ROM for the latest versions. 




A lot of the software found on the CD-ROM is discussed in the 
book. In those cases, a CD icon, such as that shown here, denotes 
the inclusion of the sofh\^are on the CD-ROM. However, the soft- 
ware denoted by the CD icon represents subsets of the holdings on 
the disc. I put many more utilities and files on there in relevant 
places throughout the disc. 



APPENDIX 



Establishing an Internet 
Presence 




The cool thing about Intranets is that you use the same technolo- 
gy to develop them that you would use to develop a presence on 
the Internet. As a result, after you have developed an Intranet, you 
have most of the tools in place to adapt your Intranet services to 
the Internet community. In short, you’re almost there! 

You’ve probably fooled around with setting up public Web and 
FTP servers before picking up this book. This book has focused on 
harnessing Internet tools such as Web servers, CGI scripts, and 
email, to serve the day-to-day needs of your Intranet. However, 
these applications were originally designed to serve files and data 
via the Internet to hordes of Web surfers. You may have your own 
reasons for developing a presence on die Internet, and this appen- 
dix talks about how this can be achieved. 

This appendix discusses the following topics that you’ll need to 
consider when adding an Internet presence to your Intranet: 

□ Establishing your reasons for developing an Internet presence 

□ Changing your World Wide Web service 

□ Advertising your services to the Internet community 

Exposing Your Intranet to the Internet 

As stated in the Introduction, you have almost all the tools that 
you need to set up shop on the Internet. But before you go ahead 
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and hang your cyber shingle, take a few minutes to reflect on why 
you want to develop Internet services. 

It wasn’t long after Mosaic and Netscape came into heavy use by 
the Internet community and public in general that people started 
creating Web sites. At first, these sites didn’t tell you anything more 
than the name of the institution and a little about what it did. The 
first generation of Web sites quickly grew old. It wasn’t much later 
that companies and organizations began asking themselves, “So, 
why do we need to have a Web site anyway?” Here’s your chance to 
think about some of the confusing questions that confironted the 
early Web pioneers. 

Why the Internet? 

The Internet represents an entirely different medium from which to 
communicate with the rest of the world. For the first time, you can 
interact with someone on the other side of the world as cheaply and 
almost as quickly as you can flick an email message down the hall. 
With access speed and usage growing every year, the Internet is 
rapidly moving into mainstream society. 

The type of service you provide has a great deal to do with who 
you are and what type of work you do. Your Internet audience can 
consist of potential customers, existing customers, potential stu- 
dents, or peers. Some of the advantages of Internet servers are 
described in this section. 



Exposing Your Organization 

The first and foremost effect of setting up a WWW or FTP server is 
that you provide exposure for your group, organization, or compa- 
ny to the Internet community. Regardless of the nature of your 
business, it’s exciting to set up a home page and see the accesses 
stream in, knowing that you’re attracting attention on the Internet. 
This titillating exposure that you provide to your group is really 
what fueled the initial growth of the Web. 
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Marketing Your Services 

A medium such as the Web enables you to share a great deal of 
information about the work you do with the outside world. Fur- 
thermore, the Internet community consists of a wide variety of 
people. If the demographics of this group matches those of your 
target markets, the Internet gives you an inexpensive means of 
advertising your organization’s services. This is true even if your 
business does not directly deal with the Internet. For example, 
Toyota (http://www.toyota.com) and Levi Strauss (http:// 
www.levis.com) are two popular Web sites that market products, 
cars, and clothing, totally unrelated to Internet technology. Con- 
sulting and law firms also use WWW servers to display information 
about the capabilities of their organizations. Universities even do 
their marketing online; with so many homes wired to the Internet 
these days, many high-school students can substitute the standard 
college visit with a virtual visit to a university’s Web site. 

Interfacing with Customers 

Let’s say that you are using Web technology. You can provide even 
more sophisticated interaction with your customers. The following 
example demonstrates such a capability. 

Think about the last time you pored through a catalog. Let’s just 
say that it was a computer catalog from a large mail-order house, 
XYZ Communications, and you were looking to find out what pric- 
es they offered for a hypothetical 14.4 modem. You had to hunt 
around for a table of contents, looking to find the page where mo- 
dems are listed. Then you had to thumb through the catalog and 
get to the modem pages. Finally, you found a paragraph of infor- 
mation about that modem — maybe two paragraphs if they used a 
six-point font. You called the toll-firee number and the polite phone 
operator put you on hold for a few minutes. Twenty minutes later, 
you asked questions about the modem and were referred to techni- 
cal support. After another minute on hold (ha!), you talked to 
someone who answered one of your questions but offered to re- 
search your other questions and fax answers back to you... as soon 
as possible. After the phone call, you felt vaguely unfulfilled. 






434 



Appendices 



Now imagine if you could access that store’s Web page through 
your Netscape Web browser. You’d be able to do a search on the 
company’s offerings. Just type modem, and on this hypothetical 
Web site a list of links to the various makes and models of modems 
would appear. At this point, you’re thinking, “Whoa! I didn’t know 
that XYZ Communications had a 28.8 modem! This is great!” Lit- 
de did you know that a link was added soon after the store received 
a truckload of XYZ modems the previous day. You click on the 
modem link and you’re presented with several paragraphs of techni- 
cal description, as well as a picture of the modem. You notice that 
XYZ bundles the UFaxIt fax software with every one of its 28.8 
modems. Hmmm, you’ve never heard of UFaxIt, Luckily, the mail- 
order house has that description hyperlinked to the Web pages of 
the company that makes UFaxIt. You notice that there are a slew of 
UFaxIt software updates available through the company’s FTP 
server. You click on those links and download the software modules 
to your computer. 

Moving back to mail-order company’s XYZ modem pages, you 
realize that it’s time to purchase the modem of your dreams. You 
click on a button that says, “Buy Me.” You’re presented with a new 
page of fill-in forms. You fill in your name, mailing address, and 
credit card number. You check the little key emblem at the bottom 
of your Navigator browser window, and you relax because you 
know that the server is using a secure connection protecting your 
transaction. You click the little button with the cash register icon 
and the transaction’s a done deal. You get your modem in the mail 
a few days later. Along with the modem, the mail-order company 
has included a hard copy of its catalog. Ironically, you can’t help 
but notice that at the bottom of the front page of the catalog, you 
see the company has printed their online catalog’s Web address. 

Types of Internet Servers 

If you’re interested in complementing your Intranet with Internet 
service, it’s safe to say that you are doing this with some type of 
corporate sponsorship. Organizations like yours produce two types 
of servers; I like to call these not-for-profit servers and corporate 
servers. These servers maintain different content and are geared 
toward different audiences. 
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The Not-for-Profit Server 

If your organization is a not-for-profit corporation, there are still 
valid reasons to develop a presence on the Internet. In fact, the 
Internet was developed so that non-profit organizations, such as 
government fiidlities and universities, could share and exchange 
research information. With the advent of the Web, the type of data 
that can be exchanged has become more sophisticated. 

Universities can publish their research activities or even make 
admissions information available for prospective students. Also, 
academic departments can publish information regarding fiiculty 
research activities. For similar reasons, not-for-profit organizations 
can publish information relevant to their work objectives. 

The Corporate Server 

When you want to advertise your company or its products, you 
usually think about what type of potential penetration the advertis- 
ing medium can establish. Now think about the millions of people 
in the country, not to mention the whole world, with access to the 
Internet. We’re not just talking about expert users. The major on- 
line services, such as America Online, CompuServe, and Prodigy, 
have millions of customers, and most of them are average American 
families dripping with disposable income. Compared to traditional 
advertising media, the Internet offers the potential to connect with 
millions of potential customers. 

The cost of maintaining a moderately sized server is a fraction of 
what it takes to advertise your company in the traditional print 
media. Furthermore, print media is limited to text and simple 
graphics. A useful feature of graphical Web browsers, such as 
Netscape and Mosaic, is that users can download a multitude of 
multimedia file types. Instead of a picture of your CEO on your 
company’s home page, you can serve an audio recording of him 
welcoming the user to your company’s Web site. Users also can 
download promotional movies provided by your site. Even if your 
business is not retail, advertising on the Web gives your potential 
and existing customers the impression that your group is quick to 
adopt emerging technologies. 
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Having a presence on the Web is the most visible presence you can 
give your company or organization. You can take advantage of the 
imiquely customizable features of HTML to configure your compa- 
ny’s home page the way you feel most effectively communicates 
your company’s image. Furthermore, Web administrators can re- 
work their company’s home pages more quickly and less expens- 
ively than they could redo their traditional advertising campaigns. 
With a few minutes of work, a page on your company’s Web site 
can be altered to describe a new product or offering. The Internet 
community sees this change almost instantaneously. 



Your Internet Services 

The type of services you provide depends on the type of business 
you conduct and the nature of your target audience. This section 
looks at the types of WWW and FTP services you can provide that 
will draw attention to your organization. 

Know Your Audience 

Your Internet service will not only depend on your type of work 
but also, as mentioned earlier, your target audience. As with your 
Intranet design, you’ll need to be aware of the needs and interests 
of your target audience. Your Internet server is just an extension of 
your organization’s marketing efforts. 

Web Services 

After deciding to set up a WWW server, the next item on your 
agenda is to decide exacdy what to put on the server. Whatever you 
do, you want it to be cool. You want to have the type of Web site 
that will draw users again and again. Some ideas regarding possible 
information served on a corporate Web site include the following: 

□ Company contact information 

□ Audio or video welcome 

□ Backgroimds of key personnel 

□ Company history 
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□ Specific product information 

□ Current press releases 

□ Vendor location and information 

□ Online catalogs 

□ Links to relevant sites 

□ Description of consulting services 

You may not possess the resources required to establish a high- 
volume Web site. Your Web site can act simply as an electronic 
business card. IVe had my Web address on my business card for 
several years, for example. Once accessed, people can learn more 
about my professional interests and responsibilities. In addition, I 
have some educational background listed on my page so that my 
peers can become acquainted with my skills and abilities. My Web 
site is not a high-volume site, and I personally would not be served 
by developing it into a high- volume site. 

Similarly, you may be part of a smaller organization, such as a law 
firm or a not-for-profit company. Users accessing your page may do 
so to learn more about your group. Your Web pages can contain 
information about the members of your firm or organization. You 
can post relevant information about the skills and background of 
your group’s staff The average Internet user may not be beating 
down the door to your site, but you may serve prospective clients 
in this manner. 

FTP Archives 

FTP remains a useful protocol for transferring large amounts of 
information. You can build links to your FTP site within your Web 
pages. The material you serve via FTP would supplement your Web 
site. For example, you might store an archive of company press 
releases in an FTP archive. You also can store reports or white pa- 
pers produced in applications such as PDF, Microsoft Word, or 
Adobe PageMaker directly on your server. PDF’s cross-platform 
readability makes it an ideal file type for archive documents. Your 
FTP server can serve any documents or files that you want to 
archive for reference purposes. 
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Your New Web Presence 

To the uninitiated, the Internet and the Web are synonymous. As 
covered in Chapter 1, the Internet is comprised of many different 
services and protocols. Many of these services existed before the 
Web. However, the utility and innovation of the Web boosted use 
of the Internet. 

As with your Intranet, your Web services will be the foundation of 
your Internet services. To set up your new Web pages, you’ll need 
exactly the same tools and equipment you used for your Intranet. 
This section talks about how to adapt the style and direction of 
your Web pages to appeal to the users outside your organization. 

Changes in Style 

With your Intranet Web services, you had the luxury of a captive 
audience. In a sense, you were preaching to the converted. Your 
users will use your Intranet services as a matter of conducting busi- 
ness. Sure, people will like your pages more if they contain glitzy 
graphics and text, but they’ll access your pages and services just the 
same. 

Your Internet Web pages will require an entirely different focus. 
Your conventional HTML and drab company logos are not going 
to keep people from hitting the dreaded Back button once they hit 
your site. The fact that many people accessing your pages are ac- 
cessing them through modems, rather than high-speed cable con- 
nections, also places a constraint on your content. You’ll need to 
address some added security issues as well. Content is still the bot- 
tom line if you expect Internet visitors to return. 

Content and Presentation 

Your content and presentation will need to be slicker than what you 
have presented in your safe and secure Intranet Web service. For 
example, your Intranet users are interested in one thing — using 
your Intranet to simplify their administrative tasks. They don’t care 
if you’ve got tons of graphics, audio, or video on your pages. Inter- 
net surfers, however, have different concerns. The average attention 
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span of a Web user is small and growing smaller; to get your 
message out, you’ll need to be concise and efficient in your 
presentation. 

You’ll need to use graphics efficiently. Many people may be access- 
ing your page through a modem. Your Intranet is most likely wired 
with a higher-speed internal connection with high bandwidth in 
abundance. In every aspect of your Internet Web pages, design 
with the low-bandwidth user in mind. Pages with loads of graphics, 
for example, will discourage modem-users. Imagemaps are useful 
navigational tools, but make sure they are comprised of small 
graphics stored in GIF or JPEG files. 



NOTE 






If you do plan to use large amounts of graphics on your Web 
pages, remember that many browsers will cache frequently used 
graphics. A common occurrence of this is the ubiquitous ball 
graphic commonly used in lieu of bullets in bulleted lists. Once the 
ball is loaded from a Web server, it is stored and displayed from 
the browser’s internal cache rather than called up each time it’s 
referred to in the HTML code. 



Whereas you may have presented long pages on your Intranet Web 
server, you’ll need to break them up into smaller documents for 
Internet use. I consider a long Web page to be any page that is 
comprised of more tlian four browser window lengths from start to 
finish. Even if you just include text on these pages, tlicy take time 
to download. Smaller interlinked documents are much easier to 
navigate. Remember that you are competing with thousands of 
other Web servers for users’ attention. Anything you can do to 
make your pages easier to navigate will help. 

Your Web page content also is going to be slanted to users outside 
your organization. Your Intranet offerings are likely to be more 
administrative and informative, whereas your Web pages will be 
more slick and efficient. You may want to use larger font sizes in 
your Web pages. Whereas your Intranet pages contain instructions 
and information geared to users required to use your pages, your 
Internet pages need to have plenty of white space so as to be more 
readable. 
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NOTE 






For Navigator and Internet Explorer browsers, you can change the 
font sizes with the <FONT SIZE=n>...</FONT> commands. In this 
command, n is an integer that represents the increase or decrease 
in the size of the font with respect to the normal font size. 



Security 

You should protect your Intranet from attacks within your organi- 
zation. Threats of disciplinary action or firing go a long way to 
secure your system from internal tampering. A firewall goes a long 
way to ensure protection from uninvited accesses. 




For more information on securing your network, see Chapter 13, 
“Intranet Server Security. “ 



The situation changes once you advertise your presence on the 
Internet. People from all over the world will have access to your 
server. The MacOS provides few loopholes that can be compro- 
mised; however, with hundreds or thousands of external accesses 
each day, you run the risk of drawing the attention of someone who 
can exploit those loopholes. 



Probably the most obvious and effective measure you can take to 
secure your new Web service is to run it outside your firewall. This 
means actually running your Web and FTP servers on separate 
machines; the disadvantage of this approach is that you require 
muldple Web and FTP servers. However, with this approach, you 
minimize exposure of your Intranet, running entirely within your 
firewall, to unwarranted access. Your Intranet users can access your 
external Web pages by going out through the firewall. While per- 
formance is impaired slighdy, chances are that your users will find 
everything they need on your Intranet service. 




There may be some features on your external server that you will 
want to duplicate on your internal Intranet. It suffices to say that 
you do not want to rig up a special HTTP connection between the 
two systems. You must keep your Intranet and your external Inter- 
net servers separate at all costs. 
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Post as few real names as possible on your Internet Web pages. 
Hackers frequently try to determine passwords to systems by calling 
users by name and tricking them into revealing their accounts and 
passwords. One clever hacker was able to trace the keys that one 
user entered into his computer. Posing as a member of the techni- 
cal support group, the hacker called the user and asked the user to 
type in his name and password. The user complied, and the hacker 
was able to gain access to the user’s files, and from diere was able 
to infiltrate the rest of the system. 



NOTE 




One trick that many system administrators use and that you might 
try is to set up a mail account for yourself as webmaster® 
your_company.com where you substitute your correct domain for 
your_company.com. In this way, you do not have to reveal your 
identity on your Web pages unless you feel comfortable doing so. 



As with your Intranet machines, make sure that your FTP and Web 
servers reside on different machines. If a hacker compromises one 
machine, this method will prevent compromise of all of your data. 



Handling the Bandwidth 

Your connection to the Internet needs to be robust enough to han- 
dle the amount of volume you expect your server to generate. 
Nothing will turn off prospective Web surfers more than having to 
wait more than a few seconds to download a page or retrieve a file 
through FTP. The major bottleneck in your Web and FTP service 
will not be the speed of your server’s CPU, but tiie capability of 
your server’s network Internet connection to handle the excess 
traffic. 

Your Server Deployment 

Let’s talk about how to deploy your servers so that you can get the 
most out of your resources. You need to look at the ways that you 
can provide safe and secure Web service. 
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Effective Server Topology 

Drawing from my own example again, I started out running a small 
HTTP server and FTP server on the same Mac. This was fine be- 
cause I was serving little more than a home page and maybe some 
pictures of my kids. Users can access my computer with either a 
Web browser or an FTP chent, such as Fetch or Anarchie for the 
Mac. I used this computer for word processing and other office 
automation applications as well. 

This arrangement worked for me because my server saw only a few 
hundred accesses each day. Unless you work for a small organiza- 
tion serving little more than your company’s home page and a few 
GIF files, you will need a more expansive topology, or layout. 

Figure B.l shows the various configurations you can assume based 
on your resources. At the very least, you can house both FTP and 
HTTP servers on the same machine. As you progress in sophistica- 
tion, you may consider moving your FTP server to a separate com- 
puter. This is so that your Web server and FTP server will not have 
to compete for the same processor resources. It’s also a good idea if 
a lot of your traffic arises from FTP access, as is the case with a soft- 
ware archive. 




< 

Sparse 

Resources 



► 

Ample 

Resources 



Figu re B . 1 Depending on the number of computers and amount 
of resources at your disposal, you can deploy your Web and FTP 
servers in a variety of configurations. 
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Well, that’s great. Your HTTP and FTP servers are running on 
separate machines. Your FTP links are integrated into your Web 
pages using URLs addressed to the FTP server. Well, what do you 
do if your HTTP performance is still overloaded? One option is to 
move your graphics to a smaller machine that does nothing but 
serve graphics. Most HTML pages are 5 to 10 KB in size and re- 
quire one download. However, each page might have 5 to 10 
graphics files on it that can be 10 to 200 KB depending on the 
graphic. If you relegate die graphics to a faster machine, your pri- 
mary HTML server can serve your home page, while your graphics 
server can handle the heavy-duty task of downloading graphics to 
the requesting browser. 




If you are planning to use a separate graphics HTTP server, make 
sure that you define the graphic sizes in your <IMG> tags (using 
the Netscape HTML extensions). Your HTML server will set aside 
the desired space in your pages as the graphics are being down- 
loaded from the graphics server. 




RushHour, from Maxum Corp, is a tool that works with WebSTAR 
to serve graphics via a cache file. By loading graphics into RAM, 
the files are served more quickly. RushHour works best when 
running on a separate server. See the URL at the end of this 
appendix. 



Finally, you may decide that all of your CGI scripts are slowing you 
down. You may decide to move these scripts to yet another server. 
Offloading these scripts to a remote computer means that they can 
be left running continuously so that execution is much quicker. 
This leaves more RAM on your HTML server to serve the actual 
HTML. Another option is for you to transfer much of your CGI 
functionality over to Java applets and JavaScripts. In this way, you’ll 
be offloading the burden of running these applications on the cli- 
ent computers, again reducing the load on your server. 
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Isolating Your Server 

You’re going to want to put these servers outside your firewall. Any 
attempts to compromise the security of your HTTP servers will 
affect only the servers leaving your Intranet intact. Your users will 
have to go outside the firewall and back to access your home page, 
but that’s the price you have to pay for added security. 

Advertising Your Server 

When you’ve finally completed your dream server, you want to get 
people to start using it. You can do this several ways. For example, 
you can advertise through the traditional advertising media. I can- 
not get through a full night of prime-time television without seeing 
at least one company list its server address in an advertisement. In 
computer and technical magazines, it’s expected that not only will 
the advertising company have a Web site, but they’ll include the 
address in the advertisement. As effective as traditional advertising 
media can be, with 40 million regular users, the Internet seems like 
a good place to start. 

Using the Internet to Advertise Your Server 

Nowadays, there are several means to advertise your server on the 
Internet. You can hang your Web pages without any fanfare, and 
sooner or later, a Web-crawling robot will stumble across your 
page. The content of your pages will get added to its database; 
someone searching for a string of text that’s somewhere on your 
pages will be led to your site. If you don’t mind waiting a few 
months for a robot to find your page, you’re in great shape. How- 
ever, there are more effective ways of alerting the Internet commu- 
nity to the presence of your Web page. 



NOTE 





ing but scan the thousands of Web pages on the Intemet and 
download their contents to a massive database. These applications 
are often referred to as Web-crawling robots. Some services that 
utilize this technique are WebGrawler (http:// 
www.webCTawler.com), Info-Seek (htlp://www.infoseek.com), 
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Lycos (http://www.lycos.com), or Alta Vista (http:// ! 

www.altavista.digital.com). All three of these services are available 
from the Netscape search page. This page is at http:// 
home.netscape.com/home/internet-search.html, or accessible 
through the Search directory button at the top of your browser 
window. 



What's in a Name? 

A common convention for organizations these days is to set up 
their WWW and FTP sites with the following naming convention: 

www.company_name.com 
WWW. organization_name . org 



or 



ftp .company_name . com 
ftp .organization_name .org 

In this manner, you use the node name www.xyz.com for the XYZ 
Web pages. This aids the users who knows they are looking for the 
XYZ Communications home page but do not know the exact ad- 
dress. Try it out for a company such as Disney (http:// 
www.disney.com) or a government organization such as NASA 
(http://www.nasa.gov). Sometimes organizations even set up an 
alias of their Web and FTP sites as company_name.com. The 
browser software then connects to the correct server depending on 
the service prefix in the server address. 



Usenet 

You should be visiting several newsgroups regularly. To keep 
up with the Mac Internet server community, scan the 
comp.infosystems.www.servers.mac newsgroup. To announce your 
server to the Internet community, submit the relevant information 
to the moderated newsgroup comp. infosystems.www. announce. 
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This newsgroup is accessed by thousands of users each day and is 
one of the quickest and most direct means of advertising your 
server. 



NOTE 




To find out the charters of the other newsgroups in the 
comp.infosystems.www hierarchy, check out http://boutell.com/ 
~grant/web-groups.html. Instructions on submission to 
comp.infosystems.www.announce are included here as well. 



Yahoo 

If tliere’s a Who’s Who for the World Wide Web, it’s got to be 
Yahoo (http://www.yahoo.com). Yahoo started out as a small in- 
dex of useftil Web pages at Stanford University, but grew too large 
for the academic emironment and now is an independent service. 
You can request that your site be included in the Yahoo database. 
Yahoo operates under a strict hierarchy, so you’ll have to character- 
ize your server’s function succinctly. Your server will get lumped 
into a page with other serv^ers similar to yours. Yahoo also has a 
searchable query capability so that users do not have to burrow 
through the complicated hierarchy to find your server. 

NCSA and Netscape What's New Pages 

Both NCSA and Netscape Communications maintain What’s New 
pages. Instructions are given on the pages shown here for submit- 
ting new sites. 

Various What^s Nen^ Pa^es 

Netscape http://home.netscape.com/home/whats-new.html 

NCSA http://www.ncsa.uiuc.edu/SDG/Software/Mosaic/ 

Docs/whats- new.html 

Yahoo http://www.yahoo.com/new 



These What’s New pages are updated frequently and provide a 
means for you to advertise your server. 
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Keep in mind that in Navigator, the Netscape What’s New page is 
accessible through the toolbar. 



Cool Site of the Day 

InfiNet, an East Coast Internet provider, operates the Cool 
Site of the Day page (http://cool.infi.net/). InfiNet staffers 
wade through email submissions and offerings on 
comp.infosystems.www.announce for sites that are the coolest. 
What makes a cool site? I don’t know; if I did, my site would have 
made it on the list. You \vill have to check out this page for answers 
to frequently asked questions about this site. 



NOTE 




InfiNet claims that some sites experience about 1 75,000 to 
200,000 hits on the day their site is selected to be a Cool Site. If 
you opt to submit your server as a Cool Site, be careful, you might 
get what you wish for. 



Brad Schrick 

Brad Schrick, a Palo Alto-based Mac Internet consultant, maintains 
an active list of Mac WWW server addresses at http:// 
www.ape.com/webstar. The sites on this list have denoted that they 
are run using the MacHTTP or WebStar applications. Brad will 
accept postings if you are using another server application. 

Internet Shopping Malls 

If you want to offer your company’s services to the Internet retail 
market, add your page to the Internet Shopping Mall at http:// 
www.internet-mall.com/. The Mall is a way to buy products from 
companies who maintain a Web presence. There are other similar 
services on the Net that you access from this page. 

Underwrite Someone Else's Web Page 

Depending on how deep your pockets are, you may consider 
underwriting a popular service. For example, Yahoo and the 
Netscape Search page maintain small graphic images sponsored by 
advertisers. These images usually are hyperlinked to the sponsoring 
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organization’s home page. Many popular sites allow space for ad- 
vertisers to post links, but it’s not an inexpensive means of advertis- 
ing your page. 

Provide Ancillary Service 

One of the big dilemmas facing the early television programmers of 
the 1950s was finding a way to fund initial television broadcasts. It 
wasn’t long before companies determined which television pro- 
grams were most heavily watched by their target markets. These 
companies then paid for advertisements during these broadcasts. 
This practice is still in effect today. 

As much as we are used to free services on the Internet, someone 
has to pay administration, configuration, and maintenance costs for 
the cool things we see on the Web. Companies are learning to offer 
Web services valuable to the Internet community; these services are 
then heavily laced with the sponsoring company’s logo and market- 
ing propaganda. A good example of this practice is AT&T’s 
toll-free directory service mentioned previously. During the 1995 
Indianapolis 500 race, Valvoline maintained a home page (http:// 
www.valvoline.com) that contained up-to-date reports and photo- 
graphs from the time trials and race. They knew that people who 
were interested in the race could very well be potential Valvoline 
customers. 

By offering a service unique to your target market, you can provide 
a lot of exposure to your Web site. For example, if your company 
makes athletic shoes, you may want to maintain links to track-and- 
field home pages. Or you may want to provide up-to-the-minute 
coverage of the track-and-field events of the latest NCAA basketball 
tournament. Build it and they will come. 

Nurturing Your Web Site 

Once your Web and FTP sites are up and running, you’ve only just 
started. In this dog-eat-dog Web environment, you will have to 
continuously work at keeping your site current, interesting, and 
exciting. Some of the tips in this section should give you ample 
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food for thought with regards to nurturing your Web site and mak- 
ing it work for you. 

Controlling Costs — ^Your Biggest Headache 

Forget programming, learning CGI scripting, or understanding 
audio and video formats. Your biggest challenge as a WebMaster 
will be in controlling costs. Your Internet presence differs from 
your Intranet in that it will be harder for your Web site to pay for 
itself. We’ve already talked about how your Intranet services will 
trim some of your administrative costs, but the expense of hanging 
your shingle on the Internet may be somewhat harder to justify. An 
expensive Web server is going to show up like a sore thumb when 
your organization is looking to cut costs; if it’s not producing a lot 
of interest in your organization, it’ll be that much harder to keep 
your boss from shutting you down or relegating your WWW ser- 
vice to an SE/30 on the modem connection down the hall. 

Your Two Biggest Expenses 

Yom two biggest expenses are simple — connection and staffing. 
Your connection to the Internet is a recurring cost and one that 
may not be easily justified. For example, your Ethernet costs go up 
according to the speed of the connection; furthermore, your con- 
nection is perhaps the single largest cost of your whole Internet 
venture. In a perfect world, you would string up a high-speed fiber 
connection and not worry about it ever again. However, in this 
imperfect world, such a move would be cost-prohibitive for all but 
the most active sites. Your connection must be robust enough to 
handle the traffic you expect, but it must be inexpensive enough to 
make your system viable. 

Your next biggest cost is going to be staffing. As your Web service 
grows, it will become more difficult for one person to be in charge 
of hardware purchasing, network installation and troubleshooting, 
hardware installation, software installation, and programming. You 
may have to develop a staff to aid in these efforts. That’s another 
recurring cost. Each member of your staff will have to be trained in 
their individual specialties, and those folks are not cheap. The 
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upside is that with the rush to the Web, networking and program- 
ming experts are plentiful. Your best bet is to find individuals that 
can work at more than one task. I know of many network engineers 
who can program HTML and troubleshoot Ethernet cable prob- 
lems. Unless your Web server evolves into a huge effort, you will 
have to work with a multi-talented staff that can juggle many tasks 
at once. 

Using Consultants 

If you’re thinking of bringing in consultants, then I haven’t done 
my job with this book! Seriously, if you’re thinking of bringing in 
consultants, expect to spend several thousand dollars for startup 
costs associated with a large server and $100 per horn for program- 
mers to update your server content. Graphic designers who 
specialize in Web graphics content also charge significant fees. Con- 
sultants take a lot of the grunt work out of the process, but at a 
high cost. The whole idea of this book is to put the knowledge of 
Intranets and Internet service in your hands, thereby making your 
investment easier to pay off. 

Tips for Keeping Your Site Alive 

Change is good in real life, but on the Web it’s a necessity. Your site 
needs to be dynamic, interactive, and robust enough to handle the 
rapid pace of WWW culture and technology. We’ll cover some of 
the means to do this in this section. 

Start Modestly 

The wonderful thing about using the Mac as a server platform is 
that you can start out small and cheap using MacHTTP or NetPre- 
senz to establish a fledgling Web site. You can gradually increase 
yoixr server processor size and speed and then switch to a commer- 
cial server. In this way, you can strike a chord with your audience 
and determine which features of your server are most popular and 
demand the most nurturing. 

This also gives you the chance to grow with your server. The 
skills you need today will be dwarfed by the needs of your server 
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tomorrow. For example, I set up my own Web server several years 
ago running MacHTTP and just serving up some text and maybe a 
GIF or two. Widiin a year’s time, I had moved parts of the server 
to a Unix machine and had implemented imagemaps, Perl and 
Unix shell CGI scripting, and some fledgling database interaction. 
Fairly soon (hopefully by the time you read this). I’ll be experi- 
menting with Java and JavaScript. The key point is that I had time 
to grow with my server. Granted, you may not have a few years 
with which to grow with your server like I did, but avoid the temp- 
tation to embrace all the hot trends of the WWW at once. The last 
thing you want is to represent your company with a server that 
seems contrived and prefabricated. 

Keeping Your Site Current 

What’s the first thing you think when you see a Web page that’s 
five or six months old? You think that the site’s pretty stale, don’t 
you? Lots of WebMasters denote the modification date at the bot- 
tom of the page. It’s a great feature but can be damning if you 
don’t keep up with your pages. 



— 

NOTE For discussion on using template files with the BBEdit HTML Tools, 

O see Appendix C, 'Perfecting HTML." 

My advice to you is to use die templates in the BBEdit HTML 
Tools or some other HTML editor to allow you automatically to 
update your modification dates on your pages. Then, revisit them 
occasionally, adding new graphics and formatting. This gives users 
the impression that your pages are dynamic and current. 



Getting Feedback 

I often receive notes from u‘.ers who have accessed my pages. I 
make it easy for them do to this by leaving mailto links addressed to 
myself sprinkled throughout my pages (see Appendix C, “Perfect- 
ing HTML,” for more information on the MAILTO tag). These 
comments are often something substantial like, “Cool pages, man!” 
I have received feedback and even questions on some of the links I 
provide. 
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Your users have a chance to give you feedback, if you add mailto 
links on your pages. It’s rare that this feedback is not constructive 
and is a way of gauging the relevance of your site on the Web. 

Unking to Similar Sites 

Back in the early days of the Web, the NCSA had an interactive 
posting board where you could leave your name, your server’s 
URL, and a description of your server (the Free for All site is now 
no longer located at http://thphys.irb.hr/www.list.html). It wasn’t 
long before people started streaming onto my little Macintosh Ilci 
and then dropping my site into their list of bookmarks. From there, 
my site was actually incorporated into other HTML pages. One of 
the biggest thrills you can have in any vocation is to be recognized 
by your peers; so you can imagine my excitement at seeing links to 
my site in sites all over the world. 

The Web community is so diversified at this point that different 
sites cater to different segments. Find out which sites members of 
your target market frequent and link to them fi*om your page. It’s 
only a matter of time before the other sites return the favor. This 
interlinking actually is what gave the World Wide Web its name. 

Allow for Personal Home Pages 

Personal home pages are some of the most accessed types of pages 
on the Web. In these pages, we learn a lot about people who we’ve 
never met, but whose picture (and sometimes voice) can be viewed 
at our discretion. People also put interesting links on their home 
pages. These links, or even the pages, eventually may draw atten- 
tion to your site. 

If the Web server exists outside your firewall, as it should, your 
users may have special access to that machine. You could give ev- 
eryone in your organization access to your server, but this should 
not be undertaken lightly. If a mischievous file is somehow deposit- 
ed on your server by an outside party, your intranet users could 
accidentally retrieve that file and compromise the security of your 
intranet. A better method is to set up a special connection between 
the Internet Web site and a mirror machine inside your firewall. 
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This mirror can have a special write-only privilege on your server 
and would be programmed to transfer user information once a day. 
Your intranet users would modify the files on the mirror computer; 
these modifications would be transferred to the server on a periodic 
basis. 



Surfing for Ideas 

One of the best ways to keep current on other trends is spelled out 
in three words — Browse the Web! Granted, your boss is not going 
to be thrilled to have you browse pages all day, but many of the 
new trends and buzzwords are hanging out there. Often when I see 
some interesting page. I’ll download the source to see how the 
WebMaster accomplished a neat frame or cool JavaScript. By peck- 
ing out on the Web on a regular basis, you’ll be able to keep 
abreast of changes in this dynamic environment. 

Summary 

IVe skimmed many topics in this Appendix. My intent was to get 
you thinking about some issues involved in planning the Internet 
portion of your server. A haphazardly planned server can limit your 
options for growth in the future. 

There are many reasons for establishing a presence on the Internet. 
These reasons, however, rarely overlap with the justifications be- 
hind your Intranet. Although the technologies are equivalent, your 
Intranet and Internet services provide two different functions. 

In the next appendix, we’ll talk about some of the advanced 
HTML programming features that you can implement in your 
pages. However, you can go back and look at some other related 
chapters. 

□ Chapter 4, “Macintosh HTTP Servers,” to learn how to set 
up HTTP servers on your Macintosh. 

□ Chapter 5, “Managing Your Intranet Web Services,” to obtain 
tips on efficient Web server management. 
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□ Chapter 6, “Creating an Efficient Web Site,” to learn about 
ways that you can develop a Web site that is easy to browse. 

□ Chapter 7, “Writing CGI Scripts,” to learn about writing 
scripts for your Web site. These scripts allow you to process 
data from HTML forms and return customized Web pages. 

Links Related to This Appendix 

RushHour http ://www.maxumxom /RushHour 
Search Engines 

Netscape http:/ /home.netscape.com/home/internct- 

Search Page search.html 

Alta Vista http://www*altavista.digital.com 

Lycos http://www.lycos.com 

Info-Seek http;//www.infoscek.com 

WebCrawler http://www.webcrawler.com 
What’s New Pages 

Netscape http://home.netscape.com/home /whats-new.html 

NCSA http://www.ncsa.uiuc.edu/SDG/Softwarc/Mosaic/ 
Docs/ whats-new.html 

Yahoo http ://www.yahoo .com /new 
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Perfecting HTML 

Some of the more popular HTML editors are discussed in this 
chapter. There are several commercial, shareware, and freeware 
versions available for the Macintosh. In addition, we’ll discuss some 
of the more popular Netscape HTML extensions that you can use 
to develop your Web pages. 

Introduction to HTML Editors 

I often think of a Web browser as an HTML interpreter, although 
somewhat limited in that capacity. The only way you can use a 
browser to validate your HTML is to load it. Standard interpreters, 
like Basic or Perl, will give error messages that aid you to correct 
programming errors. Browsers like Navigator and Internet Explorer 
will take their best shot at your code and will display what they 
think you meant on the screen. HTML debugging, especially for 
more esoteric constructs like forms and tables, can be arduous. For 
this reason, there are HTML validator applications and services 
available. These services are useful in that they analyze your code 
for syntax and logical errors. They are also useful in that they will 
check your code corresponding to the document type definition 
(DTD) associated with HTML 2.0, HTML 3.0, or the Netscape 
HTML extensions. 



NOTE 



s© 



My recommendation is that you keep a copy of your Web browser 
running during your editing session if you have enough RAM to do 
so. You can tell the browser to load a local file, edit the file, and 
then tell the browser to reload the file. I prefer Netscape 



continues 
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Navigator, as it's generally faster than Mosaic for local file access. 
Microsoft Internet Explorer is also a good browser to use for 
checking your HTML— you cannot beat the price (it’s freeware). 

When using Navigator to check your HTML code, make sure that 
you leave the Toolbar visible so you can easily hit the Reload 
button. Reloading a document is also performed by hitting 
Command-R. 



HTML Web Weaver 




HTML Web Weaver is a shareware HTML-specific editor. Like 
other HTML-specific editors, it’s designed to aid in the develop- 
ment of HTML documents through the use of special buttons and 
icons. HTML Web Weaver version 2.5.3 makes use of icons and 
floating tag palettes as shown in Figure C.l. The main text window 
displays the HTML, while various icons and palettes aid in forma- 
tion of the various HTML tags. 



Glossary 



Preview 



Forms 
Images 



Horizontal Line 

J Linebreak Link Format Tags 



Ballon Help — ^ 
Anchor 




<TITLE>CU9to!l Toga Float8r3</TITLE> 

<H3>Cu8ton Tags Floater8</HS> 

<IMO Alian>C*nt»r SRC»-CustBm_F1oat*rs.0IF-><BR><P> 

CustoB tags floaters ora floating alndavs that contain a list of 
Him tags that you define, custo* tags floaters are usually used for 
grouping tags inta related tags such as all header tags in one« 
frequently used tags in anther, etc.<P><P> 

To create a custon tags f looter ... <br> 

<OL><Li> Choose the <B> 'Create Custoe Tags Floater* </B> coeeand froe 
the <8> 'UindoBs' </B> eeru. 

<t.i> Uhen the etndoe appears, hold doen the shift key and select the 
desired tags to appeor In the custoe tags floater eindoe. 

<LI> Choose the <8>‘0kay‘ </ b> button ehen finished. 
cLi> rioue the nee custoe tags floater eindoe os you eish. 

</BL> 




-Default 

-Special Characters 
-Paragraph Break 
-Email To 
-List 



Figure C.l HTML Web Weaver v.2,5.3 sports an icon palette and 
floatin£f ta£! table for use in HTML coding. 
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As HTML Web Weaver uses the Macintosh TextEdit resource, it’s 
limited to working with files that are less than 32KB. Many editors 
use this built-in text editing resource as a foundation. Commercial 
word processors use proprietary editing resources and are usually 
not constrained in editing file size. 

The way Web Weaver works could be described as a “select-and- 
tag” method. You can select various portions of the text and apply 
the appropriate tags on the selection from either the icon or float- 
ing tag palettes. While your editor window will display both your 
text and your HTML commands, HTML Web Weaver makes it 
easy to differentiate between them. As seen in Figure C.l, HTML 
tags can be assigned a custom font, style, and color to differentiate 
them from normal text. This useful feature for beginners might 
annoy experienced HTML programmers. 

The predetermined tags listed imder the Tags menu are derived 
firom HTML 2.0 along with some Netscape extensions; this version 
of the application did not have any HTML 3.0 tags included with 
the software distribution. HTML Web Weaver is geared toward 
beginning HTML programmers. There is ample Balloon Help with 
descriptions designed to appeal to the novice. Still, experienced 
programmers will find the application useful. 

Furthermore, HTML Web Weaver allows you to quickly preview 
your code in a Web browser of your choice with a simple keystroke. 
HTML Web Weaver sends a temporary file over to the browser for 
display. Even though this process is performed very rapidly with 
this editor, it goes against my earlier recommendation of locally 
viewing the edited file in your Web browser. I find local viewing 
beneficial because: 

□ I can switch between my editor and my browser fiister than 
my editor can switch over to my browser. It takes almost no 
time for me to pop over to Navigator and punch the Reload 
button. 

□ Switching between the applications forces me to save the file 
so that my browser can view the most recent version. Saving a 
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file repeatedly ensures that I won’t lose my most recent docu- 
ment version in case of a system crash. Clicking the Preview 
option within my editor would cause me to grow fat and lazy 
and not save my document until it was too late. 

Creating a New Document 

There is no template capability in HTML Web Weaver. You must 
install the <HEAD> and <BODY> environments. By going up to the 
File menu and dragging down to Open, you’ll be staring at a blank 
text field. You have access to the icon palette and the default floating 
tag tables, but you’ll have to start fi-om scratch. With the select-and- 
tag approach, you have to enter new text, select it, and apply the 
appropriate tag. The tags in the floating palettes are self-explanatory; 
a description of the various palette icons is given below. 



Icon 


Description 


Balloon Help 


Toggles Balloon Help on and off 


Preview 


Launches Web browser to view current 
document 


Anchor 


Creates anchor tag 


Images 


Establishes image tags using filenames 
and alignment 


Forms 


Creates the various forms tags and their 
attachments 


Glossary 


Sets up a definition list 


Horizontal Line 


Creates horizontal rule with Netscape 
options for width and size 


Linebreak 


Installs a line break tag <BR> 


Link 


Adds HTML link 


List 


Creates a variety of lists 


Email to 


Creates a clickable tag that sends mail to 
an address (mailto) 


Paragraph Break 


Inserts a paragraph tag <P> 
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Special Characters Launches popup menu detailing all the 
HTML special characters. Click on a 
character and the HTML code is inserted 
in the document 

Format Tags Launches popup menu detailing all avail- 
able HTML tags. Click on a tag and 
the resulting code is inserted in tlie 
document 

Default Assigns default style to selected text 



Opening an Existing Document 

Upon opening an existing document witliin HTML Web Weaver, 
you’ll be queried as to whether you want the program to scan for 
HTML tags (shown in Figure C.2). If it finds any, it will change 
their appearance from the default font to the tag font that you’ve 
defined in the Preferences. I find this process to be slow and cum- 
bersome, but if I don’t click Yes to the query, a bug in the program 
causes the editor to disregard any text lying beyond the screen. 



I noticed that this document ujot not created Uiith a 
current uersfon of this application. Uiould you like me 
to go through the document and label all the tags in a 
GENERIC manner? 



[ Cancel ) 




Figure C.2 HTML Web Weaver will ask to scan for HTML ta£fs 
when openin£! an unfamiliar document. 



Setting Your Preferences 

By clicking on the Edit menu and selecting Preferences, you can 
bring up the Preferences dialog box, as shown in Figure C.3. The 
top two checkboxes in the dialog box deal with initialization of the 
program. If the bottom checkbox is checked, HTML Web Weaver 
will insert a carriage return after paragraph breaks, horizontal rules, 
and new lines. This does not affect the appearance of your code, 
but changes the way your document looks within the editor. 
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You can specify the default font and size with the top two popup 
menus. With the bottom four popup menus, you can specify the 
HTML tag font, size, style, and color. Again, these do not affect 
the document’s appearance within a browser, but only within the 
editor. You have a choice of five colors to assign the tags; clicking 
on the Change Colors button allows you to edit those colors. Last- 
ly, you select your Web browser with the Select Preview Helper 
button. 




IS Shoul Splash Screen at Startup 
IS Show HTML Tags UlinElaw at startup 
IS Ruto-Caniage Returns 

Default Font; | Monaco 
Default Font Size: | 12 ^ 

Tag Font: | Beneua >r| 

Tag Size: | 9 ▼! 

Tag Style: | Bold I Change Colors 1 

Tag Colon | Preen V] I Select Preulew Helper 1 

I Cancel I 



Figure C.3 Tou can set default and tag fonts within the HTML 
Web Weaver Preferences dialog box. 



Creating Custom Tags Floaters 

HTML Web Weaver allows you to create customized tables of 
your preferred tags; these tables, or floaters, will always lie on top 
of your desktop and editor window. By clicking on one of the tags 
within the table, you can insert the associated HTML code into 
the editor window. 

To create a custom tag floater, click on the Window menu and 
select Create Custom Tags Floater. The Custom Floater Editor 
appears with all the available tags displayed in a scrollable list. You 
just click on the tags that you want to include in a table; in order 
to select multiple tags in a given window, you need to hold down 
the Shift key and click the various tags. When you’re finished, click 
Okay, and a new custom tag floater will appear in the upper left of 
your screen. 
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Creating New Tags 

Now that you’ve learned how to create custom tag floaters, you’ll 
want to start populating your new floaters mth new tags. New tags 
will come into use as the HTML standards or Netscape extensions 
develop. You can create these new tags without having to wait for 
new releases of HTML Web Weaver. 

Under the Edit menu, select the Format Tags entry. You’ll notice a 
sidebar pops up asking you if you want to create, delete, or edit a 
format tag. Select Create Format Tag and the HTML Format Tag 
Editor appears as shown in Figure C.4. You can give the new tag a 
name and provide its opening and closing tag, although a closing 
tag is not required. You also can modify the tag’s appearance within 
the editor window using the popup menus inside die dialog box. 
Lastly, you can add descriptive text to the new tag. This text will be 
displayed when Balloon Help is activated. All of the active tags have 
some associated Balloon Help text. 



Custom Floater Editor 


0 


T«gs to displ«vtd In Custom Togs VMov: 






Rddress 

Anchor 

Blink 

Block Quote 

Body 

Bold 

Center 

Cite 

Code 


n 












I [ Cancel I [ Okay H | 



Figure C.4 You can create your own HTML format ta£fs with the 
HTML Web Weaver Format To£f Editor. 



NOTE 




Each tag is contained in a separate file. This slows down the appli- 
cation startup, but it does make for a flexible means of exchang- 
ing tags with other HTML Web Weaver users. These tags are 
stored in the Format Tags folder of the HTML Extensions folder in 
the main HTML Web Weaver folder. 
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Adobe PageMill 




It’s hard for me to exaggerate the advantages of the Adobe 
PageMill editor. I find it to be the most versatile and simple piece 
of software I’ve ever used. After months of working with shareware 
and freeware HTML editors, it was hard to conceal my glee after 
clicking through the PageMill tutorial. 



Many people feel that PageMill is the hottest thing to hit the Web 
since... well, the Web. PageMill offers true WYSIWYG editing, to- 
tally insulating you from the rigors of programming with HTML. 
You move text around as if you were working in a conventional 
word processor. Forms and images can be moved around in a simi- 
lar fashion. Images can be dragged from open applications and 
dropped into a PageMill window. It’s no wonder that Adobe ac- 
quired Ceneca Communications, PageMill’s original authors, back 
in late 1995. 



NOTE ^ The version of PageMill included on this book's CD-ROM is a 

w demo version only. You will not be able to save any of your edited 
text. Contact Adobe at http://www.adobe.com for information on 
purchasing the complete version of PageMill. 

An HTML document is shown in the PageMill editor window in 
Figure C.5. It looks, by design, very much like you are viewing the 
document in Netscape. PageMill was conceived as a one-stop Web 
authoring tool, in that no preview by an external browser would be 
required. Clicking on the icon in the upper right toggles an Editor 
and a Preview mode. While in the Editor mode, you can create and 
modify text and graphics. In the Browser mode, you can follow 
links to other pages that you created. The current version of 
PageMill does not yet support link access between remote sites. 



NOTE ^ PageMill users can upgrade to Adobe SiteMill, which is a Web site 

W management utility. SiteMill has all the editing options of PageMill 

and also has several administrative functions as well, such as link 
checking and outline view. 
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Checkbox 

Image Alignment Rule Image I Radio Button Textarea 



Password Field 



Text Alignment 



Mode Toggle 



Plrase sdictceyour fcvozie holick;^ 

(•) Christinas 
O ThaxiksgtnDg 
O Easier 

ONw Yew's Diy 

Ptose puts check next to the epptiwtionsyptt I 
(3 Kficrocoft Word 
Q Adobe Fbotoshcp 
Q Netscape 
O Kficrosoft Excel 



Reset 

•Submit 



Popup Menu 
■Text Field 



Submit Tbis Form 



Figure C.5 Editor or Browser? Adobe Ea^eMill makes it hard to 
tell the difference. 



Creating a New Document 

Creating a new document in PageMill is a matter of clicking the 
File menu and selecting New File. Initially, you’ll be in tlie Editor 
mode, as signified by the Quill-and-Scroll icon in the upper right. 

Icon Description 

Text Alignment Left- justifies and centers text 

Image Alignment Text is aligned to top, center, and bottom 
of image respectively 

Rule Inserts horizontal rule 

Image Inserts image from disk file 

Checkbox Inserts forms checkbox 

Radio button Inserts radio button 

Textarea Inserts textarea 

continues 
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Icon 

Text Field 

Password Field 
Popup Menu 
Submit 
Reset 

Mode toggle 



Description 

Inserts text field 

Inserts password field 
Inserts popup menu 
Inserts submit button 
Inserts reset button 

Toggles between Editor and Preview mode 




The first couple of times that you try editing, don't become 
alarmed if you see that you cannot select or modify anything. 
You're probably still in Preview mode. 



Opening an Existing Document 

Opening an existing HTML document within PageMill will launch 
the Pre\dew mode. You’ll see the document much as it would look 
within a Web browser. Toggle into Editor mode and you’ll be able 
to modify the document contents. If there are links within the page 
to files on your local computer, you’ll be able to bring those files 
into PageMill just by clicking on the hypertext. 

Using PageMill to Create HTML Documents 

Let’s try to develop a simple document in PageMill. First, let’s en- 
ter the tide Sample Tide into the Tide field in the header. Now 
type the following in die main text window: 

This is my first PageMill page 

This should appear with the default paragraph font. We can change 
that by clicking the Format menu and selecdng Heading. A sidebar 
will pop up delineadng six levels of headings from Smallest to 
Largest corresponding to the six levels of HTML headings. Just go 
for broke and choose “Largest.” Click on the Center Align tool as 
well. We should have a centered headline at the top of the page. 

Now go under Format again and select Paragraph to bring us back 
to the default font. Now add the following text: 
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So far, I like the following things about PageMill 
No HTML! 1 ! I 

Drag and Drop text editing 

No need to jump to Netscape for validation 

After typing this, you decide that you want to make bullet items 
out of the bottom three items. All you need to do is highlight the 
last three items, select Lists from the Formats menu, and move over 
to the Bullet sidebar. You see that the bottom three items now have 
bullets preceding them. 

At this point, you’re just so thrilled not to be using HTML any- 
more that you want to move the second bullet item to the head of 
the list. You select the second item and drag it up to the top of the 
list. 

Next, add a horizontal rule to the end of the list. Move the cursor 
to the end of the list and click the horizontal rule button — a rule 
appears that is the width of the window. Now, this looks nice, but a 
litde humdrum. So click on the rule, and an envelope with contact 
points springs up around it. This allows you to adjust the width of 
the rule as well as its height a la Navigator. At this point, your page 
should look like the display in Figure C.6 




Figure C.6 Elementary HTML construction is simple with 
Pa£feMill 
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Creating Links between Documents 

Well, what good is creating a Web site that has no links? Let’s add 
links to our sample page. In the PageMill software folder, there are 
four separate folders. Open the folder entided Self-guided PageMill 
Tutorial. In that folder, open a file called ReadMe.html. 

Now go back to our example document. Undcrncatli the horizon- 
tal rule, type die following: 

Click to start PageMill demo 

Then select the word demo. Now look back into the Readme.html 
file. Click on the file icon just to the left of the word Tide in the 
window header. Drag that icon over to the selected word demo in 
your example document. Presto! You’ve just created a link! The 
word demo lights up and is underlined, linked, and ready to bring 
you to the PageMill demo. Just toggle back to the Preview mode 
and test the link for yourself 

Just dragging the link into a page that has no selected text will still 
create a link. The title of the link, however, will be the title of the 
linked page. This is a good way to compile a hotlist of pages on 
which you are working. 

Also, you can add remote links by selecting text that you want 
linked, and enter the remote URL in the text field at the lower left 
of the window next to the PageMill globe. 

Creating Images and Forms 

It’s just as easy to construct images and forms in PageMill as it is to 
create links. To add an image into a PageMill document, lets go 
back to the example document. Toggle back into Editor mode and 
press Return at the point immediately following your newly in- 
stalled link. Now go into the main PageMill folder and look for the 
How to get PageMill folder. In that folder, there’s a file called 
PageMillSplash.gif Once again, click and drag the file over to your 
example document and place the cursor after the last line. Upon 
releasing the cursor, you will see the graphic appear at the end of 
the file. 
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Click on the file and you’ll sec an envelope with contact points 
around the graphic. You can now grab one of the contact points 
and resize the graphic in either direction. The page should look 
similar to what is shown in Figure C.7. 





1 untltled.html 




[gBl Hlia 


1 1 Bl © loiCiSiGSlBKzXG^ 




I Title: 1 SAtepie Title | i 



This is my first PageMiil page 



So far, I like the foQo ving thinge abov PigeMiU 

• DjwaxdI>toptextediD£ir 

• NomwLiiir 

• hfoxmltojuinptoNetec«{)eforv«lx^ 



Qick to etait P»gaMill d emQ 




Figure C.7 Graphics and links can be draped atid dropped into 
PageMiil documents. 



NOTE 






As in all Mac graphics applications, you can scale graphics equally 
horizontally and vertically by grabbing the corner contact point 
and holding the Shift key down while you move it. 



Forms elements are simple to add to your document by using the 
Attribute Inspector. However, the HTML behind form elements is 
not tri\dal. For a further examination of HTML forms, refer to one 
of the many excellent HTML books on the market or seek out 
some HTML tutorials on the Web. The W3C’s HTML 3.0 home 
page is at http://www.w3.org/hypertext/WWW/MarkUp/ 
html3/Contents.html. 
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Using the Attribute Inspector and Pasteboard 

The Attribute Inspector is the one area in PageMill where the intri- 
cacy of HTML rears its ugly head. Still, it’s an efficient means of 
designating attributes to some of the elements in your document. 
The Inspector is shown in Figure C.8; it’s accessible through the 
Show Attributes Inspector item under the Window menu. The 
Inspector allows you to customize three different objects in your 
document: the page, the text, and any form element. 



mrA II . !■ ■■ , --"T- ,n hipjal 




EiEiraiMis 




El 


rtltli:! 



®l 






J 



This is just sample text. 



-•A"'.' ^ ' - 



p... 



Aotion:! 


_l 




CMtMt Color Lfiilc Color | 




T*xt;| DofauH Norm«1:| 


Oofoutt 


Bkgr4:| DtfouU Aohvo:| 


Oofwlt -r| 




Vte1tod:j 


DofouU^I 


H 









Figure C.8 The PageMill Attribute Inspector allows you to assign 
HTML attributes to the various elements in your document. 



The three icons at the upper left of the box denote which objects 
die Inspector is modifying. To modify the document’s background 
color or image, or text color, you would use the Inspector Page 
mode. You also can specify the page’s CGI script URL, if there is 
one. The Text mode allows you to select text and modify its align- 
ment, format, or markup. You can even edit or assign a URL if one 
is associated with the selected text. Finally, the Forms mode is ac- 
tive when a forms element is selected. The Inspector is context- 
sensitive; different attributes appear, depending on which element 
is selected. As a result, you’ll see different attributes for checkboxes 
than you will for the password field. 







Appendix C Perfecting HTML 



469 



Lastly, the Pasteboard is much like the MacOS Scrapbook, in that 
you can save PageMill items within the Pasteboard. In this way, you 
can reuse items like buttons and text for the purpose of standardiz- 
ing your server’s Web pages. Like everything else in PageMill, you 
just drag and drop text, graphics, or forms items into the Paste- 
board and drag them back out for use. The Pasteboard is available 
under the Window menu. 

Other Editors 

Space limitations prevent a more comprehensive review of all the 
HTML editors. This is by no means the final word on Mac HTML 
editors. As awesome as PageMill is to work with, it suffers fi’om 
several limitations in that there’s no support for Java or JavaScript, 
HTML tables, or plug-ins. By the time you read this, Netscape may 
have released Navigator Gold, which is an integrated browser/ 
editor that functions very much like PageMill. It seems that it will 
be hard to beat PageMill, but give the industry a few months. Links 
for alternative commercial HTML editors are given at the end of 
this chapter. 

BBEdit HTML Tools 

The specific HTML editors just described have no other function 
than editing HTML. There are existing text editors for the Mac 
that arc used for a variety of purposes. These applications can be 
customized to aid in developing HTML code as well. The advan- 
tages are that these applications are inexpensive and flexible; the 
disadvantages are that many of the amenities in the specialized 
HTML editors are not present. 

BBEdit stands for Bare-Bones Editor and may be, along with its 
freeware cousin BBEdit Lite, the second most popular text editor 
after SimpleText. Since it’s not based on the TextEdit resource, you 
can edit files larger than 32KB. BBEdit Lite offers many editing 
amenities, such as a highly-configiurablc search and replace utility, 
word-wrapping, and tab control. The commercial version of 
BBEdit offers even more flexibility in searching and replacing. 
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AppleGuide help utilities, and more interfaces to established pro- 
gramming environments. The commercial version comes with a 
variety of tools and freeware on a CD-ROM, but for the purposes 
of HTML development, BBEdit Lite is more than adequate. For 
the rest of tliis appendix, we’ll discuss HTML development in the 
context of the BBEdit Lite environment. 

Figure C.9 shows a BBEdit Lite text window. In addition to the 
standard pulldown menus e\ddent in other MacOS applications, 
BBEdit Lite provides some commonly used functions from the 
toolbar at the top of the window. Most significantly, the Saving tool 
allows you some flexibility in saving your document. Note that you 
have an option to save the file in Macintosh, Unix, or DOS format. 
The various operating systems differ in that the MacOS uses car- 
riage returns to differentiate lines in a document, DOS uses line 
feeds, and Unix uses both. This difference in line termination is the 
largest obstacle to seamless ASCII file exchange between the three 
operating systems. BBEdit Lite’s ability to write files in other OS 
formats is advantageous as it facilitates file exchange between Web 
authors who use different platforms to write HTML. 



NOTE . You won't notice the different methods of line termination when 
w you mix Web servers and browsers of different operating systems. 

As we've mentioned earlier, HTML ignores any formatting in the 
document that is not described using HTML. To a Web server, the 
difference between carriage returns and linefeeds is irrelevant. 

BBEdit Lite functionality can be extended through the use of plug- 
in modules known as extensions. These utilities are accessible 
through the Extensions pulldown menu shown in Figure C.9. 

These extensions can be used as macros to perform various tasks on 
the file or its contents. Several sets of extensions have been devel- 
oped to aid HTML programmers in developing Web documents. If 
you’ve used BBEdit Lite for any kind of text editing on the Mac, 
you’re familiar with the interface; the use of either set of tools re- 
quires marginal training. 
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Figure C.9 BBEdit Lite 3.5 offers a flexible HTML programming 
interface. 



Intro to the HTML Tools Extensions 

The extensions that make up the HTML Tools are outlined in the 
following Table C.l. These extensions are extremely comprehen- 
sive. Most of them are self-explanatory, but there is ample Balloon 
Help available if you have trouble. Two of the more abstract capa- 
bilities available with these extensions are document creation 
through the use of templates and development of custom markup 
macros; we’ll spend the remainder of this section focusing on these 
two areas. 

Table C.l HTML Tools Extensions 

Tool Description 

Anchor Creates an anchor tag <A> 

Document Macros to start a new document 

Form Elements Creates forms tags and environments 
Heading Creates heading levels from 1-6 

Image Formulates <IMG> tag and relevant keywords 



continues 
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Table C.1 Continued 



Tool 


Description 


Line Breaks 


Inserts paragraph, line break, and horizontal rule 
tags 


Lists 


Creates the various types of lists 


Preview 


Creates either a graphically or text-based preview 
of file 


Style 


Creates logical or physical markup style tags 


Translate 


Translates between text and HTML 


User’s Markup 


Employs user-defined HTML macros 


Utilities 


Assigns preferences; useful administrative utilities, 
such as HTML validation and URL-based browser 
launching 



In the HTML Tools folder, open the “for BBEdit Extensions fold- 
er.” Drag the contents of that folder into the BBEdit Extensions 
folder. When you launch BBEdit, you’ll sec these extensions listed 
in the Extensions menu. If you are running BBEdit 3.5 and the 
Internet Config application, you’ll see these extensions in a menu 
entided Internet. 

Creating an HTML Document 

Select New in the File menu. Next, you’ll need to set up a docu- 
ment template. Document templates are the first place to start 
when building Web pages with the HTML Tools. These templates 
can be used as fi:amework for creating muldple HTML documents. 
Before you can create these templates, it’s a good idea to assign 
various preferences for the various extensions. 

To set preferences, open the Utilities extension and click the Prefer- 
ences button. From the pulldown menu, you see that you have four 
types of Preference options (see Figure C.IO): 

□ Addressing. Specify your Web server URL. 

□ Document. Specify the folder that contains your template 
files. 
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□ Hotlist file. Specify your hotlist file for possible URL inser- 
tion into HTML documents. 

□ Web client. Specify your favorite Web browser for use in doc- 
ument preview and other operations. 









mm 








Document 


»2 








Hotlist File 


K3 


c 


Root... 


Tour Cc 


Uleb Client 





Seruer URL: | http://timmj.anyujhere.coni 
Path: I 



[ Rbout... ] 




Figure C. 1 0 These are the Preferences options for the HTML Tools. 




Clicking on the About button in the Preferences dialog box will 
present a splash screen with information about the HTML Tools. If 
your Web client is running, however, clicking on this button will 
launch the HTML Tools home page. 



The most relevant preferences to establish for document prefer- 
ences are the document and template folder options. By establish- 
ing the document preferences, you enable inclusion of your server 
and file locations in your document templates. This information 
will be inserted as HTML comments, but serves as a useful record. 
Setting up the templates preference provides BBEdit with the loca- 
tion of your template file. 



At this point, you’ll want to customize your templates file. An ex- 
ample template file, Template.html, is given in the Templates folder 
in the HTML Tools distribution. By opening up this file, you see 
that it comprises a fi*amework for a sample HTML document. The 
code in Template.html is shown below. 



<!D0CTYPE HTML PUBLIC ” - / /W30/ /DTD W3 HTML 2.0//EN”> 
<HTML> 

<HEAD> 
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<! — 




Author: 


#THEUSERNAME# 


Machine: 


#THEMACHINE# 


Created: 


#THELONGDATE# 


Time: 


#THETIME# 


Root: 


#THER00T# 


Server: 
— > 


#THESERVER# 



<BASE HREF=#BASE#"> 

<NEXTID N=#NEXTID#> 

<LINK #LINK#> 

<TITLE>#TITLE#</TITLE> 

</HEAD> 

<BODY> 

<I — #include "header. incl“ — > 
<1 — end include — > 



#B0DYTEXT# 



<! — #include "footer. incl" — > 

<! — end include — > 

</B0DY> 

</HTML> 

The variables in the template file are referred to as placeholders; 
these are denoted by an uppercase word bracketed by pound signs. 
These placeholders are either defined by the operation system, as in 
the case of #THEUSERNAME#, #THEMACHINE#, and #THE- 
LONGDATE#, or they are defined in the Preferences dialog box. 
Note that these placeholders are interspersed with HTML code. 
Using a little HTML know-how, you can customize the template 
code to present a distinctive and standardized look to your Web 
pages. 

The template file also allows the use of headers and footers. Head- 
ers and footers offer you a means of adding standardized HTML 
code to certain parts of your document. The most common appli- 
cation of a footer is the datestamp; you could create a footer that 
imprints the date in which the page was last modified. To do this, 
you need to edit the footer.incl file also in the Templates folder. 
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Let’s replace the contents of this file to include the following: 

Page last modified by 
<ADDRESS> 

#THEUSERNAME# 

</ADDRESS> 

on 

#THELONGDATE# 

and then let’s go back to the template file. The #include 
file_name.incl command is a means of inserting the contents of file 
file_name into your template. Therefore, the contents of the 
footer.incl file will be inserted into the new document when you 
exercise the template. Assuming that you have updated all yovu: 
preferences, let’s use the template file to construct a new HTML 
document. 

Opening up the Document extension launches the dialog box 
shown in Figure C.ll. You can enter the document title and the 
base URL. If you desire, you can enter a document ID and author 
information. At this point, you can press the Insert Template but- 
ton, if you want to create a new document based on your template 
file. Based on the information within the computer’s operating 
system, as well as in the preferences that you’ve defined, the tem- 
plate produces the following HTML code: 




if you just click OK when the Document dialog box is open, you'll 
geta bare-bones (pardon the pun) template. However, if you 
Option-click the Insert Template button, you'll nptonly get a docu- 
ment created from the full template, but you'll also cause the 
button to be the default option for the dialog box. Option-djcking 
the OK button will return the dialog box to its original state. 



<!D0CTYPE HTML PUBLIC "-//W30//DTD W3 HTML 2.0//EN"> 
<HTML> 

<HEAD> 

<1 — 

Author: Joe Smith 

Machine: Joe's Macintosh 

Created: Friday, December 29, 1995 
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Time: 12:11 PM 

Root: Our Cool Mac /Net Apps/WebSTAR 

Server: http://www.anywhere.com 



<BASE HREF= "http: //WWW. anywhere. com" > 

<NEXTID N=[ undefined ]> 

<LINK [undefined]> 

<TITLE>Sample HTML Document</TITLE> 

</HEAD> 

<B0DY> 

<! — ^include “header. incl" — > 

This is an example of a header created on Friday, 
^♦December 29, 1995 at 12:11 PM 



<! — end include — > 



<l — #include “new_footer.incl“ — > 

Page last modified by 

<ADDRESS> 

Joe Smith 

</ADDRESS> 

on 

Friday, December 29, 1995 
<1 — end include — > 

</BODY> 

</HTML> 
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Figure C.11 The Document dialog! box provides several options for 

constructing and updating HTML documents. 



Presto, instant Web page! Now add some formatting to make the 
finished document look presentable. After the second header com- 
ment, add the following code: 

<P> 

This document was created with a BBEdit HTML Tools 
‘♦template. <P> 

The finished document appears in a Web browser, as shown in 
Figure C.12. As you can see, the footer information details the 
author’s name and the date that the page was last modified, as spec- 
ified in the footer.incl file. Another useful feature available in the 
Document extension is Update Document; this function allows you 
to install the values of any placeholders that have changed since the 
document’s last modification. One placeholder that will invariably 
change is the current date that is stored in either the THELONG- 
DATE or the THESHORTDATE variables. By using the Update 
Document feature, you can update the date and time listed in the 
document. This feature provides an easy means of publishing the 
last modification date of a Web page. 
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[ Netscape; Sample HTML Document i 
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& 








n 




© 


m 


B*ck 


Fcrvirt 


Homf 


1 R«1o«d 1 




1 ^ 


1 \ 


FM 


Stop 





Vh4t*sCooiy I Hydbook j NttS^rch | Wtt MfCtory | Sonwrt | 



This is an ezas^le of a header ciaatad cm Fxidej, Dacamber 29, 1995a 1230 PM 
This docmoext vas cruiad vith a BBEdk HTML Tools tampke 



Page last modified faj 
Jos Smith 

on Friday, December 29, 1995 









Figure C.1 2 This pa^e was created using the HTML Tools tem- 
plate feature. 



Creating Custom Markup Macros 

The HTML Tools also offers a highly customizable macro lan- 
guage. Furthermore, in the latest version of the HTML Tools, the 
author has installed a much more friendly front-end to the macro 
language. These macros can be easily set up to perform a variety of 
complicated but redundant tasks. The interface allows the user the 
option of creating ten different macros numbered 0-9 (see Figure 
C.13). 

To create a macro, click on one of the buttons. You then give the 
macro a name. Easy so far, right? You then assign the macro as a 
series of commands available from the down arrow next to the large 
text field. You have eight major macro topics, each with a variety of 
options. These topics and tlieir associated options are described in 
detail in Table C.2: 
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0- <i> Pre-format 

1- 0 Find 

2- O Undefined 

3- O Undefined 

4- O Undefined 



s* O Undefined 

6- O Undefined 

7- O Undefined 

8- O Undefined 

9- O Undefined 




□ Clrt-OiBlog 



[ Cancel ] [ Saue ] f[ Do Itl 



Figu re C . 1 3 The HTML Tools’ User’s Markup extension allows 
you to develop up to 10 simple macros. 



Table C.2 User’s Markup Descriptions 



Selection 


Option 


Description 


Select 


Word 


Selects word 




Line 


Selects line 




Paragraph 


Selects paragraph 




Document 


Selects document 




Contents of 
container 


Selects all text and tags of an 
HTML environment 




Container 


Selects all text of an HTML 
environment 




Extend to xxx 


Select everything from cursor 
to start of string xxx 


Insert 


Start of selection 


Inserts string before selection 




End of selection 


Inserts string after selection 




Replacing selection 


Replaces selection with string 


Find 


Next xxx 


Finds and selects next occur- 
rence of string xxx 




All xxx 


Finds all occurrences of 
string xxx 



continues 
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Table C.2 


Continued 




Selection 


Option 


Description 


Move 


Start of selection 


Moves cursor to start of 


insertion to 


selection 




End of selection 


Moves cursor to end of selection 




Top of document 


Moves cursor to top of 
document 




Bottom of document 


Moves cursor to bottom of 
document 




Next line 


Moves cursor down to start 
of next line 




Next paragraph 


Moves cursor down to start 
of next paragraph 




Start of line 


Moves cursor to start of cur- 
rent line 




End of line 


Moves cursor to end of cur- 
rent line 


Special 


Date (Short) 


month/day/yr 


characters 


Date (Long) 


Month Day, Year 




Clipboard 


MacOS Clipboard Contents 




Buffer 

Current selection 


BBEdit Buffer Contents 




Return 


Carriage return 




Tab 


Tab 




Quote 


u 




Slash 


/ 




Exclamation mark 


! 
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Selection 


Option 


Description 


Misc 


Run macro X 


Executes User Markup 
Macro X where X is 0-9 




Next default macro X 


Set the next default defini- 
tion to the number X (0-9) 




Beep 


Execute beep 




3 Beeps 


Execute three consecutive 
beeps 


Copy 


Copy to clipboard 


Copy selection to clipboard 




Copy to buffer 


Copy selection to BBEdit 
Buffer 




Append to clipboard 


Appends selection to 
contents of clipboard 




Append xxx to clipboard 


Appends string xxx to 
contents of clipboard 




Delete clipboard 


Clears clipboard 


Case 


Upper 


Raises case of selection 




Lower 


Lowers case of selection 




Word caps 


Capitalizes selection 




Make all tags uppercase 


Raises case of all tags within 
selection 




Case sensitivity ON 


Turns case sensitivity on 




Case sensitivity OFF 


Turns case sensitivity off 



NOTE 






Instead of searching for straight text, you can use Unix regular 
expressions in the Find macro. 



Using HTML Tools macros, you can perform repetitive tasks. This 
sample macro converts paragraphs to HTML preformatted envi- 
ronments: 



□ Under Select, click and drag over to Paragraph. The macro 
!SP appears in the text field. 
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□ Under Insert, click and drag over to Start of Selection. The 
command !IS“xyz” appears in the field just after the previous 
command. Change xyz to <PRE>. 

□ Under Insert, click and drag over to End of Selection. The 
command !IE“xyz” appears; replace xyz with </PRE>. 

Okay, you’ve finished defining the macro; now give it a name like 
“Preformat.” The entire macro string should look something like 
this: 

!SP!IS"<PRE>"!IE"</PRE>" 

Close the dialog box using the Save button and give the macro a 
try. Just place your cursor within a paragraph. Run the User’s 
Markup extension and check the Preformat macro if it’s not already 
checked. You should see the entire paragraph installed within 
<PRE> and </PRE> tags. 




By clicking the Ctrl-Dialog box in the User's Markup dialog box, 
you can cause a specific macro (0-9) to run whenever you run the 
User's Markup extension. To return to the dialog box, open the 
extension with the Control key held down. 



Well, you get the idea. The HTML Tools documentation gives 
examples of more intricate macros, but you’re limited only by your 
imagination. The author has incorporated an extremely powerful 
tool through the use of this extension. The macros are virtually 
impossible to debug unless you have intimate knowledge of the 
individual macro commands. However, this capability is extremely 
useful, in that it’s not specific to HTML programming. You can 
define very useful macros for your normal text editing as well. 

Miscellaneous Utilities 

The HTML Extensions offer several utilities that aid in creation of 
your HTML documents. These are available in the Utilities exten- 
sion. Selecting this extension brings up the dialog box shown in 
Figure C.14. The utilities are described in the following list: 
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8911 


r 


Insert Hotlist... 










r 


Link Summery 




r 


Comment ) |{ 




c_ 


Open URL 


□ 




Check Merkup ] 












1 [ Preferences... ] 








I 




- 







Figure C.1 4 The Utilities extension offers many useful features in 
HTML editing;. 



□ Insert Hotlist. This utility will select the hodist that you’ve 
designated as your de&ult Web browser hotlist file in the Pref- 
erences dialog box. You can insert the list as a series of an- 
chors, suitable for Web publishing, or in a textual definition 
list. This utility even handles Netscape bookmarks files, but 
ignores any hierarchy that you may have set up within the list. 
You need to have saved your bookmarks file to disk within 
Netscape. 

□ Link Summary. This utility creates a list of all the links, an- 
chors, and images used in your document and places it in an 
HTML document. 

□ Open URL. If your cursor is inside a URL that can be inter- 
preted by a Web browser, running this utility launches the 
URL in a browser that may be running. 

□ Remove Tags. This feature removes one tag on either side of 
the cursor. If a portion of text is selected, then all tags are 
removed from that selection. 

□ Comment. This utility converts selected text to an HTML 
comment. You can remove comment tags by Option-clicking 
commented text. 

□ Check Markup. The HTML Tools maintain the HTML Lev- 
el 2 Document Type Definition as defined by the standards 
process. You can check your code again in HTML 2.0 syntax. 
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This means that this tool will object to nearly all Netscape 
HTML extensions. The output is not terribly informative and 
will just denote which lines have inconsistent notation. You’ll 
need to turn on BBEdit line numbering to understand the 
error messages. 

□ Preferences. The HTML Tools preferences are described in 
the section “Creating an HTML document.” 

Using HTML Validators 

There are several types of HTML validator capabilities available to 
you. Some of the more advanced HTML editors have validation 
services offered within the editor. Other services on the Web will 
check your code for you, provided it’s available through a server. 
There is also a Mac port of a popular Unix-based HTML-checking 
application available as well. 

Why Validate? 

We talked before about the fact that Web browsers give very litde 
feedback in the processing of HTML. Navigator will take its best 
shot at displaying what it thinks you want it to display. This often 
results in a lot of head-scratching on the part of the HTML devel- 
oper. Validators can act as a source of the error messages that the 
Web browser carmot deliver. 

Furthermore, it’s important to keep in mind that the key to the 
versatility and popularity of the Web is its user accessibility, regard- 
less of the browser and operating system. There are more browsers 
than just Internet Explorer and Navigator, and until there’s a strict 
HTML 3.0 standard, there will be a lot of confusion as to what 
browsers can support what code. 

Validators give you a chance to tailor your code to your Intranet 
users. You’ll need to standardize on the type of browser to which 
you’ll gear your Intranet pages. This is made difficult, as HTML 
standards and conventions change. Six months ago, Netscape Navi- 
gator owned the Web browser market; now it’s head-to-head with 
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Internet Explorer, wliich contains its own flavor of HTML. Who 
knows what kind of HTML you’ll be developing in six months or a 
year? Validators will enable you to check your code against the 
evolving HTML standards. 

Doctor HTML 

The Doctor HTML home page is shown in Figure C.15. This ser- 
vice asks that you enter the URL of the page that you want validat- 
ed. This service is more robust than most services, and will check 
your spelling, your HTML syntax, and even the validity of your 
hyperlinks. The downside of this service is that only code that re- 
sides on established servers can be checked. If you are developing 
HTML documents on an isolated server, the Doctor cannot make a 
house call. 




Figure C.15 The Doctor HTML home page is at http:// 
imagiware. com/RxHTML, cgi. 



MaeWebLint 

WebLint is a Unix program wTitten in the Perl language. Similar to 
lint traps that trap fluff in your laundry machines, WebLint is 
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designed to pick up fluff off of your Web pages. MacWebLint is a 
port of WebLint to the Mac. MacWebLint is based on MacPerl, 
which is itself a port of Perl to the Mac; the application requires 
MacPerl in order to run. Both of these applications are installed on 
the CD-ROM that comes with this book. 

MacWebLint supports drag and drop testing of HTML files. Sim- 
ply drag your HTML files onto the MacWebLint file; it will check 
only those files with .html or .htm suffices. The application will 
launch and evaluate your code. A file entitled MacWebLint Results 
will be created in the same folder as the MacWebLint application. 
This file is a text document that you can read with MacPerl or an- 
other text editor, which will detail line-by-line possible errors in 
your HTML file. Sample MacWebLint output is below. 

test.html(9) : unknown element <1F0RM>. 

test.html(11 ) : the ROWS attribute is required for the 

^<TEXTAREA> element, 

test.htmlfl 1 ) : the COLS attribute is required for the 
^<TEXTAREA> element. 

test. html ( 16) : the COLS attribute is required for the 
^<TEXTAREA> element. 

Valid HTML files return no error messages and the MacWebLint 
Results file will be empty. The MacWebLint source and configura- 
tion files (MacWebLint.pl-source and MacWebLint.rc) are available 
for your perusal. I wouldn’t touch the source unless you knew what 
you were doing, but the MacWebLint.rc file has many options that 
you can turn on and off for error checking. 

Netscape Enhancements 

The developers of Mosaic left NCSA in 1994 and formed what has 
become the Wall Street and media darling, Netscape Communica- 
tions. In reference to licensing disagreements with the NCSA, the 
Web browser was referred to inhouse as “Mozilla,” which purport- 
edly stood for “Mosaic-killer.” 

The Navigator browser became a wild success at the expense of 
Mosaic mostly because of its increased speed, its support for inline 
JPEG graphics, and what have been politely referred to as 
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“Netscape Extensions” to HTML. The Navigator browser 
sup-ported HTML 2.0 tags before HTML 2.0 was standardized. 
Similarly, the current version of Navigator supports many HTML 
3.0-similar environments. In some cases, the browser has incorpo- 
rated support for some of the proposed HTML 3.0 elements; in 
some cases the browser supports elements contradictory to the 
latest HTML 3.0 spec. Microsoft Internet Explorer also has some 
custom HTML extensions, with more sure to come as it continues 
to gain browser market share. 

What does this mean for the future of HTML? Navigator being the 
800-poimd gorilla of Web browsers, it means that until HTML 3.0 
is standardized, you may see a flourishing of “Netscape-enhanced” 
Web sites. Many sites on the Net now sport the Netscape logo with 
a disclaimer that the site contains HTML code with several 
Netscape extensions. Some browsers such as Mosaic do not support 
a good deal of the Netscape extensions; a Mosaic user viewing a 
Netscape-enhanced Web page may see a totally different layout 
from what the Web author had envisioned. 

Modifications 

This section deals with the Netscape modifications to HTML 2.0 
tags. These modifications are similar to certain HTML 3.0 environ- 
ments, but with more flashy attributes. 

ISINDEX 

Netscape’s modification of the ISINDEX tag allows the author to 
specify the prompt to the input dialog box. The syntax is as follows: 

<ISINDEX PR0MPT="prompt_string"> 

Horizontal-Rule Attributes 

Netscape goes several steps beyond the HTML 3.0 implementation 
of the horizontal rule. Netscape not only allows the width of the 
line to be specified in relative terms as a percentage of the browser 
window width, but also in absolute terms using the number of pix- 
els. Horizontal rules also can be aligned flush left, center, or flush 
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right. Vertical thickness of the horizontal rule can be specified as 
well. Several horizontal rule examples are shown in Figure C.16 as 
viewed in Netscape 2.0; the source code is given below. 







<J» 

Back 


Fc<. krd 


Si 

Homt 


R*W 




222 

0 ^ 


8 

Print 


i» 

Ftnd 


‘w' 

Stop 


■ 






II 


Hil 


rrTrr — rr 



An hozBOECal nlM ue aon-sbadod for bener viribiliiy 
Normal Honroital RqIb 



Hoiizoxtal Role 75 % VTiikh 
HoiBoxxal Ruk 300 Pixels Wide 
Hoxizoaial Rule 5 Pixels Thick 
Horooaal Rule 75 % Width Aligned Right 



Bfial 



Figure C.16 Netscape allows highly customizable horizontal rules. 



<P ALIGN=CENTER>A11 horizontal rules are non -shaded for 
^better visibility</P> 

Normal Horizontal Rule 
<HR N0SHADE> 

Horizontal Rule 75% Width 
<HR WIDTH=75% N0SHADE> 

Horizontal Rule 300 Pixels Wide 
<HR WIDTH=300 N0SHADE> 

Horizontal Rule 5 Pixels Thick 
<HR Size=5 N0SHADE> 

Horizontal Rule 75% Width Aligned Right 
<HR WIDTH=75% ALIGN=RIGHT N0SHADE> 

List Modifications 

With Netscape HTML, you can alter the sequencing scheme for 
ordered lists. Using the TYPE keyword in the OL environment, 
you can specify uppercase or lowercase lettering, uppercase or low- 
ercase Roman numerals, or Arabic numerals. The syntax is shown 
below: 
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<0L TYPE=char> 

<LI> First List Item 

</0L> 

where char consists of cither A, a, I, i, or 1. 

Unordered lists have the option of using a variety of bullet types. 
Examine the following syntax: 

<UL TYPE=bullet_type> 

<LI> First List Item 

</UL> 

where bullet_type consists of either SQUARE, CIRCLE, or DISC. 
The default bullet type is DISC. 



New Elements 

Navigator also incorporates several new HTML tags and environ- 
ments. Note that I differentiate between tags and environments 
when discussing HTML. I refer to an HTML ta£i as a command 
that stands by itself such as <P>, <IMG>, or one of the HTML 
special characters. HTML commands that have opening and closing 
tags, such as headers and style markup, as HTML environments. 



The Infamous Blinking Text 

Perhaps no other Netscape extension has been more reviled on the 
Net than the notorious <BLINK> environment. Shortly after the 
tag was introduced, every other Web page was mind-numbingly 
blinking ad infinitum. You can make text blink by inserting it in the 
<BLINK> environment. However, no other tag will ignite the 
wrath of the HTML purist more than this litrie guy. As expected, 
the <BLINK> environment is nowhere to be found in the proposed 
HTML 3.0 specification. 

Linking Mail with Hypertext 

Netscape introduced the concept of linking email with hypertext by 
using the ersatz URL protocol MAILTO. The syntax of the tag is 
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Send <a href=”mailto:joe.smith@anywhere.coni''>mail</A> 
^to Joe Smith 

By clicking on the word “mail,” a user can bring up a mail entry 
form. The user can enter the text of the message along with a sub- 
ject and have Netscape send it off through a predefined SMTP 
host. 



NOTE . A common practice is for Web authors to include a MAILTO URL 
w somewhere on the page to facilitate feedback from the user. Do- 
ing this will allow your Intrcinet users to get back to you with ques- 
tions or feedback about your Web page content. 



Line Breaking 

Netscape also provides for line break control through the tags 
<NOBR> and <WBR>. You can prevent line breaks with <NOBR>; 
use of the <WBR> tag informs Netscape of locations where it can 
break lines, if needed. 



Font Sizing 

Netscape has the following environment used for font scaling: 
<FONT SIZE=n>. . .</FONT> 

where n is the relative size font. The default size is three, but it can 
be altered using the <BASEFONT SIZE=n> tag where n is the 
desired default font size. Relative font size can be manipulated 
using the 

<FONT SIZE=±j>. . .</F0NT> 

sequence where j represents the number of level increase or de- 
crease in size of the surrounding text font. 

Centering 

Centering is accomplished using the <CENTER> environment. 
This is in contrast to the <P ALIGN=CENTER>...</P> environ- 
ment found in HTML 3.0. 
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New Characters 

Netscape also introduced two new characters. In HTML 2.0, the 
trademark symbol, and copyright symbol, ©, are expressed using 
the ISO 8859 character codes. These symbols have unique non- 
numeric tags in the Netscape HTML extensions, Screg and &copy 
respectively. 



Image Attributes 

<IMG SRC=”url" 

[ALIGN=LEFTIRIGHTITEXTOPIABSMIDDLEIBASELINEIABSBOTTOM] 
'*[BORDER="#_of_pixels“ ] 

[ HSPACE= “ hspace “ ] [ VSPACE= ■ vspace " ] [ L0WSRC= " u rl “ ] 

The Netscape HTML extensions offer a very flexible means of 
adjusting image positions. For an explanation of the various 
<IMAGE> keywords, observe the examples in Figure C.I7. 




Figure C.1 7 The Netscape <IMAGE> ta£[ ALIGN attribute lets 
you ali£ffi text and graphics in different ways. 
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<BlG>Text Here — &gt</BI6> 

<IMG SRC=" bullet. gif "> 

<IMG SRC=“ bullet.gif" align=textop> 

<IMG SRC=“ bullet.gif" align=absmiddle> 

<IMG SRC=“ bullet.gif" align=baseline> 

<IMG SRC=“ bullet.gif" align=absbottom><P></P> 

<BIG>Image w/ 1 pixel border — &gt</BIG> <IMG 
^SRC=" bullet. gif" B0RDER=1> 

The <IMAGE> keywords shown in the example include TEXTOP, 
ABSMIDDLE, BASELINE, and ABSBOTTOM. These keywords 
align the image with the adjacent paragraph text. Also, note the 
ability to put a border around an image with the BORDER key- 
word; the argument for the BORDER keyword is width of the 
desired border in pixels. 

The keywords HSPACE and VSPACE are used to prescribe hori- 
zontal and vertical text-free margins. The LOWSRC keyword tells 
the browser to load a low-resolution proxy, located at the URL 
assigned to the keyword, instead of an original document. This 
document can be at a much lower resolution, and will therefore 
load faster because of its smaller size. After the page has finished 
loading, the high-resolution image is loaded. 



Text and Background Color 

<BODY BGC0L0RITEXTILINKIALINK=“COlor_COde“>. . .</BODY> 

Since Navigator 1.1, the user has been able to specify background, 
text, link, and active link color. Mosaic also now supports these 
attributes. As mentioned previously, Netscape and Internet Ex- 
plorer do support the HTML 3.0 background GIF and visited-text 
color proposals. 

Client- Based Imagemaps 

<IMG SRC=“image_url" USEMAP=‘'map_script#iiiap_name" 
‘•ISMAP> 
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<MAP NAME="map_name“> 

<AREA [SHAPE="RECT“] COORDS=" coordinate boundaries” 
^(HREF="reference“] [NOHREF]> 

<AREA. . .> 

<AREA. . .> 

</MAP> 

The HTML 3.0 proposals call for an alternative to the conventional 
imagemap designation using the new <FIG> environment. 

Netscape takes various exceptions to this new environment and has 
developed a fully client-based imagemap that also can work with a 
conventional server-based imagemap. 

The new attribute USEMAP added to the IMG tag indicates that 
image specified in the SRC keyword is a client-based imagemap. 
The mapping between the image and associated hyperlinks is con- 
tained in a named <MAP> environment. The argument to 
USEMAP specifies both the file containing the <MAP> environ- 
ment and the name of the particular <MAP> environment within 
that file. 

The <MAP> environment is comprised of a variety of <AREA> 
tags. These tags map certain areas of an image to desired hyper- 
links. The user gets to specify the approximate shape of the area. 
Currendy, rectangles are the only polygons supported within the 
client-based imagemap. This is in contrast to conventional im- 
agemaps that can support a variety of polygon shapes. The rectan- 
gle is specified through x-y coordinates of the lower left and upper 
right vertices. The desired hyperlink is entered in the HREF key- 
word. 

Tables 

<TABLE (B0RDER=" value"] [ CELLSPACING=" value " ] 

^ [CELLPADDING=" value” ]>. . .<TABLE> 

Netscape supports the table environment defined in the HTML 3.0 
proposals; however, new extensions have been introduced. Where 
the HTML 3.0 proposal calls for a border toggle, Netscape allows 
you to specify the width of the border in pixels using the BORDER 
keyword. Netscape allows you to control the amoimt of space be- 
tween cells, and the amount of space between the cell border and 
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using the CELLSPACING and CELLPADDING keywords; both 
options are expressed in terms of pixels. Some examples of use of 
these keywords are included in Figure C.I8. 




Figure C. 1 8 Tables can be confi^ftired with varying spacing and 
borders. 



<HTML> 

<HEAD> 

<TITLE>Table Test 
</TITLE> 

</HEAD> 

<BODY> 

<TABLE B0RDER=5> 
<TR><TD>A<TD>B</TR> 
<TR><TD>C<TD>D< / TR> 

</TABLE><P> 

<TABLE B0RDER=5 CELLSPACING=10> 
<TR><TD>A<TD>B< / TR> 
<TR><TD>C<TD>D</TR> 

</TABLE><P> 

<TABLE B0RDER=5 CELLPADDING=1 0> 
<TR><TD>A<TD>B< / TR> 
<TR><TD>C<TD>D</TR> 
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</TABLE> 

</BODY> 

</HTML> 

Dynamic Updating 

Dynamic updating is another browser feature that was initiated by 
Navigator but is also currently supported by Internet Explorer. 
With dynamic updating, the Navigator browser updates Web docu- 
ments without intervention from the user. This functionality was 
added to version 1.1 of the browser. A possible use of this tech- 
nique would be a hypothetical Web page that posted periodically 
updated news releases or stock quotes. 

According to Netscape, dynamic updating can be accomplished 
using two methods: client pull and server push. In client pull, the 
browser, or client, takes the active role in updating the docmnent; 
with server push, the HTTP server takes the active role in pushing 
the data into the browser. With client pull, the browser re-opens a 
connection to the server user-defined regularity. With server-push, 
the HTTP connection between the server and the browser is held 
open until it’s automatically closed by the server or manually closed 
by the user. 



Client Pull 

As discussed in the previous section, the HTML 3.0 tag <META> 
can be used to specify browser- or server-specific information, 
which cannot be conveyed through conventional HTML. In this 
instance, Netscape makes use of the <META> tag with the HTTP- 
EQUrV option set to Refresh. The CONTENT keyword is set to 
the update frequency in seconds. A simple document that updates 
itself every five seconds is given below. 

<HTML> 

<HEAD> 

<META HTTP-EQUIV="Refresh“ C0NTENT=5> 

<TITLE>Dynamic Updating Test</TITLE> 

</HEAD> 

<B0DY> 

<H1>This is a dynamically updated document</Hl> 
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This document is updated every five seconds based on 
^the value of the CONTENT keyword in the <META> tag. 
</BODY> 

</HTML> 

This page will update itself every five seconds. It will continue to 
update itself until the server connection is broken or until the user 
closes the window or presses the Back button. 

Server Push 

Server push is the alternative means of dynamically updating docu- 
ments. With server push, the connection is held open for a period 
of time; the server has total control over how often new data is sent 
down to the browser. The disadvantage of this method is that an IP 
connection is held open by the server, thereby constraining the 
server resources. In contrast to the client push, the server can be 
closed merely by clicking the Netscape Stop button. 

Netscape implements the MIME message format to develop the 
server push. The MIME protocol is used by many Internet applica- 
tions, most notably email. Gopher, and WWW clients, to package 
server data in response to a client request. Let’s assume that a 
MIME header is included in a response from the server to a 
browser HTTP request. One MIME header type is known as multi- 
part/mixed, which tells the browser to expect a variety of pieces of 
data within a single server message. Netscape implements an experi- 
mental MIME header known as multipart/x-mixed-replace where 
the X denotes the experimental nature of the header. Like HTML, 
MIME headers undergo a standardization process. 

When a browser sends a request to an HTTP server, the response 
comes back in the form of response headers. Most of this response 
is formulated as HTML, which is then processed by the browser. 
However, the response headers included in the message direct the 
browser to do things other than process HTML. An example of a 
server-push HTTP response is given here; 



Content-type: multipart/x-mixed replace; 
»»boundary=BoundaryString 
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— Boundarystring 
Content -type: text/plain 

Text for the first update 

— Boundarystring 
Content-type: text/plain 

Text for the second and final update 

—Boundarystring— 

Note that after the MIME header, we’ve included the boundary 
string Boundarystring; this string tells the browser when messages 
end and when new ones begin. After the first BoundaryString, you 
see the MIME header text/plain; this header tells the browser to 
expect pure text to follow the header and not to process it as 
HTML or any other format. The text is followed by a boundary 
string that concludes the first document. In this example message, 
the boundary string is immediately followed by a MIME header, 
notifying the browser that a new document is being constructed; 
new text follows the MIME header. However, the boimdary string 
is now followed by a double dash that tells the browser that the 
HTTP message is over and no new data follows. 



NOTE 




The MIME header that tells the browser to expect HTML code is 
text/html. 



In an ideal server push case, the server connection could be held 
open indefinitely. Using the multipart/x-mLxed-replace header, the 
connection remains open until the HTTP message ends with the 
final boundary string. Furthermore, this header tells the browser to 
replace the document instead of adding to it; the browser will be- 
gin displaying the new document once the next MIME header is 
read. When the browser reads the intermediate boundary string, it 
dutifully sits and waits for the next data object to arrive. 



Ideally, a server push connection could be maintained and initiated 
by a server script. The server would send down the appropriate 
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MIME headers, boundary strings, and HTML code in an HTTP 
message. You could do this easily with a CGI script on your Mac 
server. See Chapter 7, ‘‘Writing CGI Scripts,” for more information 
about writing scripts. 

One advantage of the server push mechanism is that you also can 
push an image to a browser, instead of the entire document. In this 
way, only the image is reloaded rather than forcing the entire docu- 
ment to reload each time. In an <IMG> tag, the SRC keyword can 
tie into a CGI script that commands that various GIF images be 
updated within a document window. In this manner, a crude form 
of animation capability can be added to a Web page. 

Writing a CGI script to upload several images of a graphic for ani- 
mation purposes and keeping that server connection open may be a 
labor-intensive way of doing animation on the Web. There will 
soon be an easier and more flexible way to perform animation and 
other such dynamic document updates. Navigator 2.0 browsers are 
able to process Java applets that can perform many online processes 
such as animation, calculation, and so forth. 

Frames 

Frames are yet another innovative Netscape HTML extension. It’s 
interesting to note that as implemented by Netscape, frames are not 
included in the main HTML 3.0 proposals. Just as tables allowed 
partition data throughout your browser window, Netscape frames 
allow you to partition your window into a set of smaller windows. 
Each window can represent an independent interface, operating 
independently of the other frames within your browser window. 
Frames were first supported by Netscape 2.0. 

An example of a site using frames is the Netscape Hall of Shame; its 
home page is shown in Figure C.19. Note that the window appears 
to be divided between two sections each with a left scroll bar. Each 
of these sections is called a frame. A user on this page clicks on one 
of the icons in the left-hand frame. The frame on the right-hand 
side changes content depending on which left-frame icon was 
clicked. Note that either the left or right frame can be scrolled in- 
dependently of one another. 
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Netscape: Enhanced for Netscape 2.01 
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Figure C.19 The Netscape Hall of Shame offers Navigator 2.0 
users an interesting means of navigating through its Web site using 
HTML fi-ames. 



NOTE 






Netscape maintains a list of companies and organizations who 
make use of frames at http://www.netscape.com/comprod/ 
products/navigator/version_2.0/frames/frame_users.html. 



Creating Framed Web Pages 

Frames should consist of the following four components: 

□ <FRAMESET> environment 

□ a series of <FRAME> definitions 

□ the associated HTML code for each firame 

□ a <NOFRAMES> environment containing code seen by users 
without frames-capable Web browsers 
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Frame documents are constructed similarly to normal HTML doc- 
uments except that the <FRAMESET> environment supplants the 
normal <BODY> environment. The individual frames are defined 
using the <FRAME> command. The source code for each frame is 
maintained in a separate file whose URL is specified in the 
<FRAME> tag. Lasdy, provisions are made for frames-challenged 
browsers by inclusion of a <NOFRAMES> environment. This envi- 
ronment contains code that is processed by browsers that cannot 
process frame commands. Users with frames-enabled browsers can- 
not see the HTML documents created by code within a 
<NOFRAMES> environment. 



The <FRAMESET> Environment 

<FRAMESET C0LSIR0WS=“value_liSt">. . .</FRAMESET> 

The <FRAMESET> environment is the main component of a frame 
document. Much like an HTML table, a framed document is com- 
posed of rows and columns. These rows and columns are defined 
using the <FRAMESET> ROWS and COLS keywords. The 
number of items in the lists that comprise the argument to these 
keywords defines the number of rows and columns in the frame 
document. 

The ROWS and COLS keywords can be defined either by specify- 
ing absolute row and column widths in pixels, or by specifying row 
and column widths as a percentage of the related browser dimen- 
sion. This is demonstrated in the document along with the source 
code (see Figure C.20). 

<HTML> 

<HEAD> 

<TITLE>Frames Example</TITLE> 

</HEAD> 

<FRAMESET COLS="200, * ”> 

<FRAMESET ROWS=''50%,50%“> 

<FRAME SRC=”cell.html"> 

<FRAME SRC="cell1 .html"> 

</FRAMESET> 





Appendix C 



Perfecting HTML 



501 



<FRAMESET R0WS="33%,33%,33%"> 
<FRAME SRC='’cell.html"> 
<FRAME SRC="cell.html”> 
<FRAME SRC=”cell.html”> 
</FRAMESET> 

</FRAMESET> 



</HTML> 



□ - - _ r Netscape: Frames EHample -!i:| 
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Figure C.20 A framed document allows flexibility in Web pa^e 
design. 



This example shows a frame with two columns — the left column 
contains two rows, and the right column contains three rows. Note 
the value for the COLS keyword in the first <FRAMESET> defini- 
tion consists of a number, 200, and an asterisk. The 200 defines the 
left column to be 200-pixels wide; this column remains 200-pixels 
wide regardless of how the user resizes the browser window. In 
contrast, the right column has no specified width. The asterisk de- 
notes the elasticity of die right-hand column width; as the browser 
is resized, the right-hand column expands to fill the window, 
whereas the left-hand column remains a fixed width. Note that the 
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second <FRAMESET> environment defines there to be two rows 
to the first column. Each element of the list is 50 percent, meaning 
that the row heights each comprise 50 percent of the available win- 
dow height. Similarly, the third <FRAMESET> environment as- 
signs three rows to the second column; as a result of the 33 percent 
designation, the height of each column is designated to roughly 
one-third of the available window height. 



Defining Frames 

<FRAME [SRC=“url"] [NAME="window_name“ ] 

^ [ MARGINWIDTH= " value " ] [ MARGINHEIGHT= " value " ] 
[SCR0LLING="YESIN0IAUT0“ ] [N0RESIZE]> 

The <FRAME> tag defines the characteristics of the individual 
frames. The HTML that gets processed in each frame is located at 
the URL specified in the SRC keyword. The individual frame code 
used in Figure C.20 contains HTML listed in two separate files: 
cell.html and celll.html. Celll.html contains multiple copies of the 
single header contained in cell.html. The NAME ke}word is used 
to assign a name to the frame, so that it can be targeted by links 
within the frame document or by links in other documents. 

The MARGINWIDTH and MARGINHEIGHT keywords are 
means of manually determining the width and height of the indi- 
vidual fi*ame margins in pixels. These keywords are optional; by 
default, the browser defines the margin width and height. Scrolling 
is enabled or disabled by the SCROLLING keyword; scrolling is 
enabled when the frame content exceeds the dimensions of the 
frame. The default value of this keyword is AUTO. Note that the 
lower left frame in Figure C.20 contains more code than can be 
displayed in the entire frame, so scrolling is therefore enabled. 
Some frames are resizable within the browser windows, simply by 
clicking and dragging on the boundaries with the mouse. Frames 
that are defined with the NORESIZE keyword are not resizable. 



Unking to Frames 

Before Navigator 2.0, new documents appeared either in the exist- 
ing browser window or in a new window opened by the user. The 
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new targeting feature in Navigator 2.0 allows windows to be 
opened as specified by the Web-site author. Now, Web pages can 
open within individual fi-ames or automatically open inside new 
windows. 

The TARGET attribute allows the HTML-site author to designate 
names to certain windows and can even specify that certain targeted 
documents only open in the frame or window bearing the matching 
name. This attribute manifests itself in four ways. 

□ In the anchor tag. The TARGET attribute can be used in the 
anchor tag as <A HREF="url" TARGET="frame_name"> 
Target Anchor </A>. Clicking on that link causes the link 
specified in the HREF keyword to be opened up in targeted 
frame. 

□ In the BASE tag. Specifying the target window in a base tag 
will cause all links in a document to be opened in the targeted 
window. This is of course overridden by specific uses of the 
TARGET attribute. The use is as such: <BASE 
TARGET= " fi-ame_name " >. 

□ In the AREA tag. The Netscape tag AREA is an alternative 
to the current imagemap convention. Authors are able to 
target certain areas of an imagemap to open in a desired win- 
dow. An example of this is <AREA SHAPE=" shape" 
COORDS= "coords" HREF="url" 

TARGET = " firame_name " > . 

□ In the FORM tag. The results of a form submission can be 
loaded into a desired window using the command <FORM 
ACTION = " url" TARGET = " fi-ame_name " > . 

The TARGET names can be almost any string that begins with an 
alphanumeric character. There are reserved TARGET attribute 
names that load desired links into certain windows. A summary of 
these reserved TARGET names is given in Table C.3. All other 
TARGET names that begin with underscores are ignored by the 
browser. 
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Table C.3 


Functions of Reserved TARGET Attribute Flames 


Name 


Function 


.BLANK 


Causes link to be loaded into new browser window. 


.SELF 


Causes link to always be loaded into same window in 
which anchor was clicked. Used to override <BASE> 
TARGET definition. 


.PARENT 


Loads link in immediate <FRAMESET> parent frame. 


.TOP 


Loads link in full body of window, regardless of origi- 
nal frame definition. 



Summary 

HTML is an evolving standard, and the tools used to create HTML 
documents are evolving even faster. The line between browsers and 
editors is already blurred, and future developments promise to 
merge the two applications into a single entity. We already see that 
trend with Adobe PageMill; Navigator Gold and other editors will 
only refine the ways in which HTML editors allow you to construct 
your Web pages. 

We also covered some of the Netscape enhancements to the HTML 
2.0 standard and the HTML 3.0 proposals. Microsoft also has 
introduced some HTML enhancements for use in the Internet 
Explorer. As that browser becomes more mature, Microsoft may 
introduce HTML extensions that may further diverge from the 
Netscape extensions thereby shattering the standards process. Until 
things settle down in the HTML standards arena, you will need to 
standardize on a single browser within your Intranet and formulate 
your pages with those extensions in mind. 

At this point, you’ve heard everything I’ve had to say. Feel free to 
peruse Appendix D, the glossary, for a refresher on the terms used 
in this book. Otherwise, you can hop back to any of the following 
chapters that are related to this one: 
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□ Chapter 4, ‘‘Macintosh HTTP Servers,” to learn about the 
different software you can use to set up World Wide Web 
services on your Mac. 

□ Chapter 7, “Writing CGI Scripts” to learn about writing 
scripts for your Web site. These scripts allow you to process 
data from HTML forms and return customized Web pages. 

□ Chapter 9, “Beyond HTML” to learn about ways some tech- 
niques to spruce up your Web site beyond just using conven- 
tional HTML and graphics. We’ll discuss Java, RealAudio, and 
other cool topics. 

Links Related to This Appendix 

HTML Editors 



Webtor 


http ://v^ww. igd . fh g . de/~neuss/ 
webtor/webtor.html 


HTML Pro 


http://www.ts.umu.se/~r2d2/ 
computers /package /htmlpro_hel.html 


Navipress 


h ttp :/ /www. navisoft. com /products/ 
press/press.htm 


HoTMetaL Pro 


http://vv^vw.sq.com/products/ 

hotmetal/hm-ftp.htm 


Netscape 
Navigator Gold 


http : / /home .netscape . com /comprod / 
products /navigator/version_2 . 0/ 
gold.html 



Help witli HTML Forms 

Intro to CGI Scripts http://kuhttp.cc.ukans.edu/info/ 
and HTML Forms forms/forms-intro.html 



NCSA Forms 
Tutorial 



http : //kuh ttp . cc . ukans . edu/info/ 
forms/forms-intro.html 
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1 

Carlos’ Form 


http://robotO.ge.uiuc.edu/~carlosp/ 


Tutorial 


cs317/cft.html 


Netscape HTML Extensions 


HTML 2.0 


http://www.netscape.com/assist/ 


Extensions 


net_sites/html_extensions.html 


HTML 3.0 


http://www.netscape.com/assist/ 


Extensions 


net_sites/htmLextensions_3 .html 


Dynamic Updating 


http://www.netscape.com/assist/ 


(server-push, 


net_sites/dynamic_docs.html 


client-pull) 




Frames 


http://www.netscape.com/assist/ 




net_sites/frames .html 




GLOSSARY 




lOBaseT A 10 Mbps Ethernet transmission standard that provides data 
transfer over twisted-pair cabling. 

100BaseT An Ethernet transmission standard that provides 100 Mbps 
data transfer over twisted-pair cabling. 

lOOBaseVG-AnyLAN A 100 Mbps Ethernet transmission standard 
that is a competing standard to 100BaseT. 

680x0 Describes the chip structure used by Apple to power older 
Macintosh computers. Has been supplanted by the PowerPC chip. 

Apple Event Data structure used by the MacOS for communication 
between applications. Apple events are used to allow Web servers to 
communicate with CGI scripts. 

AppleScript Apple’s scripting environment bundled with System 7.5. 

It is a popular CGI scripting environment, but sees a good deal of use 
for building normal desktop-related scripts. 

AppleTalk The MacOS native protocol. AppleTalk enables file sharing 
and printing between Macs. 

applet Describes software application written in Java. HTTP servers 
send down Java applets in conjunction with browser requests. The ap- 
plets can perform sophisticated processing on tlie browser display. 

asynchronous CGI CGI scripts that can share processing with other 
tasks. 

ATM A high-speed nework transmission medium that offers greater 
reliability and performance than conventional networks. 
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backbone A high-speed segment of a local area network to which 
many ancillary network interfaces are made. The backbone usually trans- 
fers traffic into and out of large networks as well as throughout remote 
portions of larger networks. 

bastion server A computer set outside an Intranet with the purpose to 
filter traffic from the Internet. 

BinHex An algorithm often used to convert binary files to ASCII files 
for transmission over email and FTP. 

bridge A piece of networking hardware that links two segments of a 
local area network. 

browser Software used to communicate according to one of the 
TCP/IP layered protocols such as the Web and FTP. 

client pull A Netscape-implemented feature which allows the Web 
browser to rapidly update Web pages without any intervention fi-om the 
user. 

client-server A term describing the type of application where a series 
of clients communicate and exchange information with a centralized 
server. A Web browser and an HTTP server have a client-server 
relationship. 

client-side imagemap A type of imagemap in which the reference 
URLs are stored in the HTML text. These imagemaps do not require 
the use of a specialized CGI script. 

cookies A feature introduced by Netscape which allows you to store 
information sent to the Web client by the server and/or CGI scripts. 

This information is then sent back to the browser when that user access- 
es the server once again. 

Copland The next release of the MacOS (early 1997?). This OS will be 
a total rewrite of the Finder, making it PowerPC-native, multitasking, 
and more reliable. 

domain An Internet cataloging system to manage distribution and 
placement of thousands of nodes. 
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domain name resolver An application that resolves names of the fre- 
quent DNS requests. 

domain name server A computer that translates between IP addresses 
and Ethernet node names. 

environment A pair of starting and closing HTML tags. <H1>... 
</Hl> is an HTML environment. 

Ethernet A cabling and network transmission standard. 

EDDI A high-speed networking standard that runs over copper or 
fiber-optic cable. FDDI runs on many LAN backbones to fimnel data 
through different portions of the network. 

firewall A computer that lies outside your Intranet and regulates traffic 
running between the Internet and your Intranet. 

frames A Netscape HTML extension that enables you to subdivide a 
browser window into scrollable subdivisions. 

Frontier A PowerPC-native, multithreaded scripting environment for 
the MacOS that is fast becoming the CGI scripting tool of choice. 

FTP (File Transfer Protocol) Used to transfer large files across the 
Internet and throughout Intranets. 

gateway See router. 

GIF (Graphic Interchange Format) File format used to display text 
and simple graphics. Commonly used to portray graphics on Web pages. 

group scheduler A client-server application allowing users to compare 
schedules over a network for the purpose of scheduling meetings. 

HTML (HyperText Markup Language) Programming language 
used to construct formatted text and graphics for display of documents 
via the World Wide Web. 
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HTTP (HyperText Transport Protocol) Underlying protocol 
behind the World Wide Web. Defines standard interaction between the 
Web browser and Web server. 

hub A multiport network hardware device which coordinates traffic 
from many sources. 

IETF (Internet Engineering Task Force) Industry consortium 
charged with development of Internet standards such as HTTP and HTML. 

imagemap Clickable Web graphic that allows you to bring up different 
pages depending on location of click within the graphic. 

Intranet The reason you bought this book. A TCP/IP network with 
many of the same services as those foimd on the Internet, but with a 
specific orientation towards a group or organization. 

IP address A numerically unique address assigned to each node on the 
Internet or on an Intranet. 

IP Port A means of differentiating TCP/IP communications through 
a server. Different services are channeled through different ports on an 
Intranet server. 

ISDN (Integrated Services Digital Network) A protocol for trans- 
mitting information over a digital telephone connection much faster than 
conventional modems. 

ISP (Internet Service Provider) A commercial provider of Internet 
services. An ISP usually has direct access to an Internet backbone. Users 
typically connect to ISPs using Tl, ISDN, or conventional modems. 

Java A programming language developed by Sun Microsystems that is 
being used in conjunction with Web browsers to write small, secure, 
cross-platform applications. HeavUy based on C++. See applet. 

JavaScript A scripted form of Java. Has fewer capabilities, but is con- 
sidered easier for non-programmers to work with. 

JPEG (Joint Photographic Experts Group) A rival format for GIF 
that is used primarily for storing complicated graphic images such as 
photographs. 
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KB 1 kilobyte or 1,000 bytes. 

LAN Local area network. 

MB 1 megabyte. 

MacOS A synonym for the operating system running on the 
Macintosh computer. 

MacPerl A Macintosh port of the Perl language. See Perl. 

MacTCP An implementation of the TCP/IP protocol on the 
Macintosh. Recently supplanted by Open Transport as a means for run- 
ning Intranet/Internet applications. 

mailing list A means of sending and receiving email from multiple 
users. 

Mbps 1 million bits per second. 

MIME (Multipurpose Internet Mail Extension) A means of identi- 
fying information contained in a TCP/IP transaction. 

NAP (Network Access Provider) A provider of the high-speed Inter- 
net backbones that carry large amounts of network traffic. 

NCSA (National Center for Supercomputer .^plications) 

Developers of Mosaic, the first cross-platform Web browser. 

NIC (Network Interface Card) Used to connect desktop computers 
to a local area network. 

node An active computer residing on an Intranet or the Internet. 

Open Transport A new version of the MacOS networking software. 
Replaces MacTCP and AppleTalk for networking needs. 

packet The smallest piece of data into which network traffic is disas- 
sembled and reassembled during a transmission. 

Perl (Practical Extraction and Report Language) Heavily used in 
Windows and Unix environments. See MacPerl. 






512 



Glossary 



PGP (Pretty Good Privaqr) An encryption program used to secure 
Net traffic. 

Plug-in A software module that extends the functionality of the Navi- 
gator or Internet Explorer browsers. 

POP (Post Office Protocol) Method used for email clients to retrieve 
mail from SMTP hosts. See SMTP. 

PowerPC Microprocessor used to power late-model Macintosh com- 
puters. 

PPP (Point- to-Point Protocol) Enables users to access TCP/IP ser- 
vices over a phone line. 

router Networking hardware that directs traffic according to designa- 
tions. 

server Describes a computer which publishes information in a client- 
server relationship. 

server push Netscape HTML extension that allows a Web server to 
update certain Web pages or portions of Web pages. 

SLIP (Serial Line Internet Protocol) Similar to PPP. See PPP. 

SMTP (Simple Mail Transport Protocol) Protocol used to transfer 
mail between sites. 

SSI (Server Side Includes) Server-specific commands that add func- 
tionality to Web pages such as date, access counters, and email forward- 
ing. 

SSL (Secure Sockets Layer) Encryption protocol developed by 
Netscape that encrypts data being sent between Web server and Web 
client. 

suffix mapping Process of examining a file suffix to associate data with 
a MIME type. See MIME. 

synchronous CGI CGI processing where script blocks out all other 
processes until execution is completed. 
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T1 A high-speed Ethernet networking standard. 

tag A single HTML command that needs no closing partner. <IMG> is 
an HTML tag. 

TCP/IP Used to describe the combined effort of the Transmission 
Control Protocol (TCP) and the Internet Protocol (IP). Both protocols 
work to move network packets between destinations. 

URL (Uniform Resource Locator) Used to identify specific locations 
on the World Wide Web. 

video conference Remote audiovisual communication. 

W3C (World I^de Web Consortium) Industry group charged with 
setting standards for the World Wide Web. 

WAN Wide area network. 

World Wide Web Conglomeration of servers, protocols, clients, and 
networks that exchange data using HTTP. See HTTP. 
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<FRAMESET> tag, 500 
<ETR> (horizontal rules), 155 
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wiring protocols, 31 
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28.8 modems, 40 
100BaseT, 31 
NICs, 38 
NuBus cards, 38 

68000-based microprocessors, 74 
68030 Macs, 55 
68040 Macs, 55 

A 

A/UX (Apple Unix), 63 
absolute URLs, 126 
access 

InterServer Publisher, 304 
host, 106 

NetPresenz, 289-293 
remote, 43 

ABJi (Apple Remote Access), 44 
NetPresenz, 297 
PPP, 43 
SLIP, 43 
WebSTAR, 90 
servers 

restricting, WebSTAR, 97-98 
WebSTAR, 100 



access logs, see logs 
actions, WebSTAR, 96 
adding users 
AIMS, 327-329 
InterServer Publisher, 107 
addresses 
DNS, 360 
IP, 27 

ListSTAR, 355 

MAC (Medium Access Control), 34 
Admin application (WebSTAR), 
90-93 

configuring, 93-95 
logs, 98-100 
passwords, 98 
realms, 97 

restricting server access, 97-98 
suffix mapping, 95 
user-defined actions, 96 
advertising 
ancillary service, 448 
cool site of the day, 447 
Internet Shopping Mall, 447 
naming WWW sites, 445 
NCSA, 446 
Netscape, 446 
newsgroups, 445 
servers, 444 
Shriek, Brad, 447 
underwriting other services, 447 
Usenet, 445 
Yahoo, 446 

AIMS (Apple Internet Mail Server), 
323-332 

adding users, 327-329 
configuring, 324-327 
deleting users, 327-329 
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forwarding mail, 329 
installing, 323 
launching, 323 
logs, 331 

connection statistics, 332 
error, 332 

out^oin^ messa£fes, 330-331 
passwords, 328 
routing, 330 

AISS (Apple Internet Server 
Solutions), 56 
aliases, 128 

aligning images, tables, 152 
ALLOW keyword (MacHTTP), 82 
ancillary service, advertising 
servers, 448 

anonymous FTP, 282-283 
APIs (Application Progamming 
Interfaces), 217 
Apple 

System 7.5, 73 
System 7.5.3, 79 
WWW sites, 72 
authoring, 73 
Internet services, 73 
Apple Event Handler, 

AppleScript, 196 
Apple events 
CGI variables, 181 
CGIs, 180 

Apple Internet Mail Server (AIMS), 
323-332 
see also AIMS 

Apple Internet Server Solutions 
(AISS), 56 

Apple Remote Access (ARA), 44 
Apple Unix (A/UX), 63 
Apple Workgroup servers, 56 
scalability, 60 

AppleScript, 73, 184-200 
Apple Event Handler, 196 
closing scripts, 197 
creating scripts, 186 
FileMaker Pro, 199 



forms, 196 
Frontier, 207 
comparison, 212 
HTTP 1.0 header, 195 
MacHTTP, 75 

OSAX (Open Scripting Architecture 
Extensions), 190 
run-only, 188 

running as application, 188 
sample script, 191 
saving scripts, 187 
Script Editor, 185 
Stay Open box, 197 
text-only scripts, 187 
variables 
initializing, 194 

AppleSearch, document searches, 
259 

AppleShare volumes, NetPresenz, 
297 

AppleTalk, 28 
Macintosh, 18 
network protocols, 28 
Application Progamming Interfaces 
(APIs), 217 
applications 

AppleScript, saving scripts as, 188 
Clay Basket (HTML), 132 
ColorMeister, 157 
fat binary, 74 
Grinder (HTML), 130 
NetPresenz, 286-301 
PageMill, 462-469 
SiteMill, 166 

RushHour (graphics), 443 
WebMap, 224 
Web Weaver, 456-461 
see also editors (HTML) 

ARA (Apple Remote Access), 44 
architecture, plug-ins, 273-277 
archives, 9, 13 
CGIs, 221 
document, 13, 424 
FTP, 281, 437 

InterServer Publisher logs. 111 
software, 14, 425-426 
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ASCn files, 312 
asynchronous CGIs, 181 
Asynchronous Transfer Mode 
(ATM), 32 

ATM (Asynchronous Transfer 
Mode), 32 

Attribute Inspector (PageMill), 468 
audio, RealAudio, 265-267 
Automobile Classifieds (Tango), 242 
AWG (Apple Workgroup Servers), 

56 



B 

backbones, 36 
FDDI, 36 
hubs, 38 

NAP (Network Access Providers), 39 
servers 
FTPy37 
WWWy37 

background, NetPresenz nmning, 
296-297 

background color, 156 
ColorMeister, 157 
Netscape, 492 
background images, 158 
backups, POPmail client, 336 
bandwidth, 441 
<BASE> tag, 127 
BBEdit HTML Tools, 469 
documents, 472 
extenstions, 471 
macros, 478 
utilities, 482 
BBSs, 414-419 
Web Crossing, 414 
confi£furin0y 415 
installing y 415 
messages, 417 
binary files 
FTP, 311 
httpd4Mac, 117 

BINARY keyword, MacHTTP, 87 
BinHex, InterServer Publisher, 113 



blinking text (Netscape), 489 
borders, tables, 151 
bottlenecks 
bus speeds, 5 1 
connections, 5 1 
servers, 50 
bridges, 34 
segments, 37 
browsers 
CGIs, 174 

Common Gateway Interface, 172 
CU-SeeMe, 413 
bulleted lists, 143 
bulletin boards, 14 
see BBSs 
bus speed, 51 
Butler SQL, 234-237 
installing, 236 
interfaces, 240 
Tango, 235 
installing, 236 
ButlerClient, 240 
ButlerTools, 238 

c 

C/C++, scripting, 216 
caching, DNS, 365 
cards, PCI Architecture, 61 
case sensitivity, 79 
cc:Mail, 322 
CD-ROM (book), 429 
CE QuickMail, 321-322 
centering tag, 490 
centralized-access server model, 124 
CGIs, 172-174, 180 
APIs (Application Progamming 
Interfaces), 217 
Apple events, 180 
AppleScript, 184-200 
Apple Event Handler, 196 
closing scripts, 197 
creating scripts, 186 
FileMaker Pro, 199 
forms, 196 
Frontier, 212 
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HTTP 1.0 headers, 1 95 
OSAX (Open Scripting Architecture 
Extensions), 190 
run-only, 188 

running as application, 188 
sample script, 191 
saving scripts, 187 
Script Editor, 185 
Stay Open box, 197 
text-only scripts, 187 
asynchronous, 181 
browsers, 174 
C/C++, 216 
forms, 176 
Frontier, 200 
AppleScript, 207, 212 
forms, 212 
framework, 208 
HTML headers, 211 
installing, 201 
Netscape, 214 
Object Database, 203 
opening, 201 
quick scripts, 202 
samples, 205, 210 
servers, 209 
GET, 179 
HyperCard, 217 
imagemaps, 226 
languages, 183-184 
libraries, 221 
MacPerl, 216 

offloading from server, 443 
portability, 221 
POST, 179 

post-query scripts, 179 
processing, 181 

Server Side Includes (SSIs), 218 
synchronous, 181 
Tango CGI, 248 
variables, 181-183 
WebSTAR, 101 

Claris Emailer, POPmail client, 335 
Clay Basket, 132 
client pull (Netscape), 495 
client servers (HTTP connections), 
69 



dient-side imagemaps, 154, 227 

clip art, 161 

clones, Macs, 57-58 

closing scripts (AppleScript), 197 

CoUabra, 12 

colocation (ISP), 41 

color 

background, 156, 492 
links, 157 
text, 492 

ColorMeister, 157 
commands, Maqordomo, 345-346 
Common Gateway Interface, 172 
Communications page (Netscape), 
141 

compiled languages 
scripts, 221 
concentrators, 35 
see also hubs 
configuring 
AIMS, 324-327 
httpd4Mac, 115-117 
InterServer Publisher 
lO£fS, 110 

MacHTTP, 76-84 
ALLOW keyword, 82 
BINARY keyword, 87 
default file locations, 78 
DEFAULT keyword, 78 
DENY keyword, 82 
DUMP JUFJIZE keyword, 80 
keywords, 77 

MAXLISTENS keyword, 79 
MAXUSERS keyword, 79 
performance factors, 80-81 
PIG_DELAY keyword, 80 
PORT keyword, 80 
REALM keyword, 83 
security, 82-84 
suffix mapping, 81-82 
TIMEOUT keyword, 79 
user limitations, 79 
NetPresenz, 295-297 
TR-WWW, 255-259 
Web Crossing, 415 
WebSTAR, 93 
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connecting 
Internet 
colocation^ 41 
fractional T1 lines, 40 
ISDN, 41 
ISP, 40 

ISP, locating server with provider, 41 
modems, 40 

NAF (Network Access Providers), 39 
T1 lines, 39 
T3 lines, 39 

connection statistics (AIMS), 332 
connections 
Ethernet, 51 
HTTP, 69 

InterServer Publisher, idle, 105 
MacHTTP 
refusing, 87 
server speeds, 50 
content, (servers), 122-126 
content and presentation (WWW), 
438 

converting spreadsheets to HTML 
tables, 129 
cool links, 168 

cool site of the day, advertising 
servers, 447 

cooperative muldtasking, 19-20 
Copland, 21 
copper phone wiring, 41 
copyright symbol, 491 
corporate servers, 435 
corporate WWW site, 436 
costs, 449-450 
Unix servers, 19 
CPU speed, 50 
creator code (files), 81 
CU-SeeMe, 408-414 
browser helper application, 413 
hardware, 409 
reflector services, 409 
using, 410 

customers (Internet), 433 



D 

DAL code, ButlerClient, 240 
databases, 9, 232-235 
4th Dimension, 234 
Butler SQL, 234-237 
installing, 236 
interfaces, 240 
Tango, 235 
ButlerClient, 240 
BuderTools, 238 
FileMaker Pro, 234 
internal, 233 

SQL (Structured Query Language), 
233 

Tango, 235,241-254 
Automobile Classifieds, 242 
installing, 236 
Query Builder, 250 
query documents, 252 
search results, 251 
Seminar demo, 245 
Tango CGI, 248 
Tango Editor, 249 
DEFAULT keyword, configuring 
MacHTTP, 78 
default mapping (files), 82 
definition lists, 143 
DENY keyword, configuring 
MacHTTP, 82 
design issues (WWW) 
content and presentation, 438 
security, 440 

DlMMs (Dual-Inline-Memory- 
Modules), 58 
directories, 126-129 
aliases, 128 
FTP, 314 
organizing, 127 
URLs 

absolute, 126 
relative, 126 
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disks^ 60 
email space, 336 
RAID, 61 

distributed>access server model, 125 
DNS, 360-366 
caching, 365 

InterNIC Domain Name Registry, 
368, 370 
MacDNS, 382 
Macintosh, 366 
MIND (Macintosh Internet 
Daemon), 383 
name hierarchy, 361-363 
naming, 367-371 
queries 

iterative^ 363-365 
recursivcy 363-365 
QuickDNS Pro, 371-382 
Admin applicatioHy 374-377 
installing, 371-373 
load balancing, 380 
resource records, 377-380 
reverse domains, 380-382 
Unix DNS tables, 382 
secondary servers, 367 
registering, 367-371 
DNS (Domain Name System), 359 
Doctor HTML, 485 
document archives, 13, 424 
document searches, 254-259 
AppleSearch, 259 
MacSite Searcher, 259 
TR-WWW, 254 
configuring, 255-259 
installing, 255-259 
documentation, online, 163 
documents 

BBEdit HTML Tools, 472 
PageMill, 463 
Web Weaver, 458 

domain name hierarchy, 361-363 
Domain Name System (DNS), 359 
domain names, registering, 42 
domains, reverse (QuickDNS Pro), 
380 

drag-and-drop, 73 



DUMP3UF^SIZE keyword 
configuring MacHTTP, 80 

dynamic updating (Netscape), 495 

E 

editing responses 
Maejordomo, 346 

editors (HTML), 455 
BBEdit HTML Tools, 469 
documents, 472 
extensions, 471 
macros, 478 
utilities, 482 
PageMill, 462-469 
Attribute Inspector, 468 
creating documents, 463 
forms, 466 
links, 466 
Pasteboard, 468 
Web Weaver, 456-461 
documents, 458 
tags, 460 

email, 9, 14, 318-322 
AIMS (Apple Internet Mail Server), 
323-332 

adding users, 327-329 
configuring, 324-327 
connection statistics, 332 
deleting users, 327-329 
error log, 332 
forwarding mail, 329 
installing, 323 
launching, 323 
logs, 331 

outgoing message log, 330-331 
passwords, 328 
routing, 330 
cc:Mail, 322-324 
commercial servers 
cc:Mail, 322 
Quarterdeck Mail, 322 
QtiickMail, 321 
disk space, 336 
FTP, 283 
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MIME (Multimedia Internet Mail 
Exchange), 70-72 
ima£ie/£fify 71 
text/htmly 71 
NotifyMaU, 329 
POPmail clients 
backupSy 336 
Claris EfnaileVy 335 
Eudoray 333 
Eudora LitCy 334 
NetscapCy 334 
Quarterdeck Mail, 322 
QuickMail, 321-322 
SMTP (Simple Mail Transfer 
Protocol), 319-320 
StarNinc Mail, 102 
tags, 166 
Ethernet, 51 
lOBaseT, 31 
100BaseT, 31 
Macintosh, 18 
mCSy 38 
NuBus cardSy 38 
Eudora, POPmail client, 333 
Eudora Lite, 334 
Excel, HTML conversion, 130 
Exchange, see Microsoft Exchange 
executing scripts, 181 
expansion boards, PCI Architecture, 
61 

expenses, 449-450 

Explorer (Netscape extensions), 141 

extensions 

BBEdit HTML tools, 471 
Explorer, 141 
Netscape, 140-142 
tablesy 151 

server, NetCloak, 220 
servers, InterXTML, 218 



F 

fat binary, 74 

FDDI (Fiber Distributed Data 
Interface), 32 
backbones, 36 



feedback (users), 451 
file-sharing, 92 
FileMaker Pro, 234 
AppleScript, 199 
files 

aliases, 128 
ASCII, 312 
creator codes, 81 
FTP 

ASCII ftlesy 312 
formatSy 31 1 
MacBinaryy 311 
texty311 
imagemaps, 225 
MacHTTP 
default locationsy 78 
suffix mappin£fy 81-82 
PostScript documents, 313 
Stufflt, 312 
suffix mapping 
default mappin£fy 82 
serving non-standard Mac fileSy 87 
folders 
aliases, 128 
InterServer Publisher 
FTP sharin£f foldery 311 
MacHTTP, accessing, 75 
NetPresenz, 288-289 
homey 292-293 
organizing directories, 127 
font sizing, 490 
forms, 9 
AppleScript, 196 
CGIs, 176 
Frontier, 212 
PageMill, 466 
timecards, 421 

forwarding mail (AIMS), 329 
fractional T1 lines, connecting, 
Internet, 40 
frames, 498 
defining, 502 
linking, 502 

TARGET attribute, 503 
frameworks (Frontier), 208 
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Frontier, 200 
AppleScript, 207 
comparisoHy 212 
forms, 212 
framework, 208 
HTML headers, 211 
installing, 201 
Netscape, 214 
Object Database, 203 
opening, 201 
quick scripts, 202 
sample, 205, 210 
servers, 209 

FTP (File Transfer Protocol), 

279-286 

anonymous, 282-283 
archives, 281, 437 
ASCII files, 312 
directories, 314 
email, 283 
file formats, 311 
Internet Config, 285 
Macintosh, 284 
mirror sites, 313 
NetPresenz, 114, 286-301 
AppleShare volumeSy 297 
confipfurin^y 295-297 
FTP foldersy 288-289 
home foldersy 292-293 

installin0y 286 

lo£fSy 299 
me$sa£(e$y 300 
privile£fesy 290-293 
remote commandsy 297-300 
running in back^roundy 296-297 
securitjy 293-295 
SIVC (Standard Internet Version 
Control)y 296 
user accessy 289-293 
user accountSy 287-289 
WWW accesSy 300 

PDF (Portable Document Format), 
313 
servers 
backboney 37 
services, 283 



Structure Mount (SMNT) 
command, 297 
Stufflt files, 312 

FTP sharing folder, InterServer 
Publisher, 311 



G 

gateways, 33 
see also routers 
GET method (CGIs), 179 
GIF (Graphics Interchange Format), 
158 

imagemaps, 223 
MIME, 71 
graphics 
clip art, 161 
GIF, 158 

imagemaps, 153, 221-227 
client-sidey 227 
GIFy 223-227 
hotspotSy 223-227 
JPEGy 223-227 
scriptSy 226-227 
WebMapy 224-227 
writing! to fileSy 225-227 
JPEG, 158 
photographs, 161 
RushHour, 443 
see also images 

Grinder, see HTML Grinder 
group scheduling, 402-407 
Meeting Maker XP, 402-407 
groups (subnets), 43 
groupware, 10-12 
comparison with Intranets, 12 
future, 12 
Lotus Notes, 1 1 
Microsoft Exchange, 11 
protocols, 10 
security, 11 
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H 

hard disks, 60 
email space, 336 
RAID, 61 
hardware 
bridges, 34 
leamin0y 34 
se£[mentSy 37 
CU-SeeMe, 409 
hubs, 35 
MacHTTP, 74 
PCI Architecture, 61 
RAM, 58 
routers, 33 
number of, 35 
subnets, 43 
headers (MIME) 
image/gif, 71 
text/html, 71 

HelpDesk information, 13 
helper applications, CU-SeeMe, 413 
hexadecimal numbers, 157 
histograms, WebSTA^ 94 
home folders, NetPresenz, 292 
home pages, personal, 452 
horizontal rules (<hr>), 155 
Netscape, 487 

host access (InterServer Publisher), 
106, 304-308 
Hotjava, 270 
hotspots, imagemaps, 223 
<HR> (horizontal rules), 155 
HTML (Hypertext Markup 
Language) 

<BASE> tag, 127 
background color, 156 
background images, 158 
Clay Basket, 132 
editors, 455 

BBEdit HTML Tools, 469 
Pa£feMill, 462-469 
Web Weaver, 456-461 
Grinder, 130 
serial numbers, 149 
stretched lists, 146 



headers 
Frontier, 211 

horizontal rules (<hr>), 155 
imagemaps, 153 
client-side, 154 
JavaScript, 271 
links, 158 
lists, 142 
bulleted, 143 
definition, 143 
indexed, 144 
len^h, 144 
ordered, 143 
stretch, 146 
unordered, 143 
mailto tag, 166 
MS Excel, 130 
Netscape 

enhancements, 486-504 
extensions, 140-142 
spreadsheets, converting to tables, 
129 

tables, 151-152 
ali£fnin£f images, 152 
borders, 151 
tutorials, 178 
validators, 484-486 
Doctor HTML, 485 
MacWebLint, 485 
HTML 3.0 (Netscape), 487 
HTML Grinder 
Sequential Linker tool, 162 
serial numbers, 149 
stretched lists, 146 
HTML Tools, see BBEdit HTML 
Tools 

HTTP (Hypertext Transfer 
Protocol) 
connections, 69 

InterServer Publisher, 102-113, 118, 
301-311 
BinHex, 113 
FTP sharing folder, 311 
host access, 304-308 
idle connections, 105 
installin£f, 102-103, 301-302 
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InterXTML, 113, 218 
IP ports, 105 
loss, 109-111, 308-310 
MacBitmry, 113 
More Web confi£furation, 104 
realms, 307-308 
security, 106-109, 304-308 
Setup application, 104-106, 302-304 
Status Window, 310 
Status window, 112 
users, 306-308 
Web Sharins folder, 112 
IP (Internet Protocol) ports, 69 
MacHTTP, 73 
access lo^s, 84-86 
AppleScript, 75 
confisurins, 76-84 
folder access, 75 
hardware, 74 
installins, 74-76 
refusins connections, 87 
scripts, 76 
security, 82-84 

serving non-standard Mac files, 87 
status window, hiding, 87 
suspending lossitis^ 57 
verbose lo^ messa£jes, 86 
WebSTAR, 88-102, 118 
Admin, 90-93 
CGI scripts, 101 
confi£furin£f, 93 
file-sharin£f, 92 
histograms, 94 
installing, 89 
interface, 100 
lo£fs, 98-100 
memory, 95 

miscellaneous settings, 100 

passwords, 98 

realms, 97 

remote access, 90 

restricting server access, 97-98 

serial number tool, 100 

serial numbers, 94 

server access parameters, 100 

ServerStat, 100 



Shotten, Chuck, 88 
suffix mapping, 95 
user-defined actions, 96 
WebStat, 100 

World Wide Web Consortium, 70 
HTTP 1.0 header, AppleScript, 195 
httpd4Mac, 114-118 
binary files, 117 
configuring, 115-117 
installing, 114 
hubs, 35, 37 
backbones, 38 
deploying, 37 

HyperCard scripting, 217 

I 

icons, Yahoo Web site, 155 
idle connections, InterServer 
PubUsher, 105 
image attributes, 491 
image/gif 
MIME, 71 

imagemaps, 153, 221-227 
client-side, 154, 227 
GIF, 223-227 
hotspots, 223-227 
JPEG, 223-227 
scripts, 226-227 
WebMap, 224-227 
writing to a file, 225-227 
images 
aligning 
tables, 152 
background, 158 
see also graphics 
indexed lists, 144 
initializing variables, AppleScript, 
194 

installing 
AIMS, 323 
Frontier, 201 
httpd4Mac, 114 
InterServer Publisher, 102-103, 
301-302 

MacHTTP, 74-76 
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Macjordomo, 339 
NetPresenz, 286 
QuickDNS Pro, 371-373 
RAM, 58 
Tango, 236 
TR-WWW, 255-259 
Web Crossing, 415 
WebSTAR, 89 
serial numberSy 94 

Integrated Services Digital Network 
(ISDN), 41 

interfaces, Butler SQL, 240 
internal databases, 233 
Internet, 431-437 
bandwidth, 441 
connecting 
colocation, 41 
fractional T1 lines, 40 
ISDN, 41 
ISP, 40 

ISP, locating server with provider, 41 
modems, 40 

NAP (Network Access Providers), 39 
T1 lines, 39 
T3 lines, 39 

corporate WWW site, 436 
customers, 433 
FTP archives, 437 
IP addresses, 27 
marketing, 433 
security, 440 
servers 

corporate servers, 435 
not-for-profit servers, 435 
Internet Config (FTP), 285 
Internet Explorer, Netscape 
extensions, 141 

Internet Server Providers (ISP), 39 
Internet Shopping Mall, advertising 
servers, 447 

InterNIC, registering nodes, 42 
InterNIC Domain Name Registry, 
368-370 

interpreted languages, scripts, 221 



InterServer Publisher, 102-113, 

118, 301-311 
BinHex, 113 
FTP sharing folder, 311 
host access, 304-308 
idle connections, 105 
installing, 102-103, 301-302 
InterXTML, 113,218 
IP ports, 105 
logs, 109, 308-310 
archiving, 111 
configuring, 110 
viewing, 110 
MacBinary, 113 
More Web configuration, 104 
realms, 307-308 
security, 106-109, 304-308 
adding users, 107 
host access, 106 
passwords, 107 
realms, 108 
subnets, 106 

Setup application, 104-106, 302-304 
Status Window, 310 
Status window, 112 
users, 306-308 
Web Sharing folder, 112 
InterXTML, InterServer Publisher, 
113, 218 
IP 

addresses, 27 
packets, 27 
ports, 69 

InterServer Publisher, 105 
security, 70 

streams, Open Transport (OT), 61 
ISDN (Integrated Services Digital 
Network), 41 
ISINDEX tag, 487 
ISP (Internet Server Providers), 39 
colocation, 41 
connecting, Internet, 40 
ISDN, 41 

locating server with provider, 41 
modems, 40 

iterative queries (DNS), 363-365 
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J 

Java, 268-272 
Hotjava, 270 
JavaScript, 271 
JPEG (Joint Photographic 
ExpcrtsGroup), 158 
imagemaps, 223 

K 

keywords 
MacHTTP, 77 
ALLOW, 82 
BINAKT, 87 
DENY, 82 

DUMP_BUF_SIZE, 80 
MAXLISTENS, 79 
MAXmEKS, 79 
PIG_DELAY, 80 
POST, 80 
REALM, 83 
TIMEOUT, 79 

L 

languages 
CGIs, 183-184 
scripts 

APIs (Application Prq^ammin^ 
Interfaces), 217 
AppleScript, 184-200 
C/C++, 216 
compiled, 221 
HyperCard, 217 
interpreted, 221 
MacPerl, 216 
Java, 268-272 
launching AIMS, 323 
learning bridges, 34 
MAC (Medium Access Control), 34 
length of lists, 144 
libraries (scripts), 221 
line breaking, Netscape, 490 



linking 
frames, 502 
sites, 452 
links, 158 
color, 157 
hot link sites, 168 
maintaining fresh, 166 
PageMill, 466 
Linux (Unix), 63 
lists, 142 
bulleted, 143 
definition, 143 
indexed, 144 
length, 144 
Netscape, 488 
ordered, 143 
stretch, 146 
unordered, 143 
ListSTAR, 347-355 
addresses, 355 
Mailer services, 352 
services, 348 
Timer services, 349 
load balancing, QuickDNS Pro, 380 
locating server with provider, 41 
logging MacHTTP, suspending, 87 
logs 

AIMS, 331 
error, 332 

out£(oin£f messages, 330-331 
InterServer Publisher, 109-111, 
308-310 
archiving. 111 
configuring, 110 
viewing, 110 
MacHTTP, 84-85 
verbose log messages, 86 
NetPresenz, 299 
ScrverStat, 100 
WebSTAR, 98 
WebStat, 100 
Lotus cc:Mail, 322-324 
Lotus Notes, 11-12 
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M 

MAC (Medium Access Control), 34 
MacBinary, InterServer Publisher, 
113 

MacDNS, 382 
MachTen (Unix), 63 
MacHTTP, 18, 67, 73, 118 
access logs, 84-86 
AppleScript, 75 
BINARY keyword, 87 
configuring, 76-84 
ALLOW keyword, 82 
default file locations, 78 
DEFAULT keyword, 78 
DENT keyword, 82 
DUMP_BUF_SIZE keyword, 80 
keywords, 77 

MAXUSTENS keyword, 79 
MAXUSERS keyword, 79 
performance factors, 80-81 
PIG_DELAT keyword, 80 
PORT keyword, 80 
BTALM keyword, 83 
security, 82-84 
suffix mapping, 81-82 
TIMEOUT keyword, 79 
user limitations, 79 
folder access, 75 
installing, 74-76 
refusing connections, 87 
requirements, 74 
scripts, 76 

serving non-standard Mac files, 87 
Shotten, Chuck, 67 
status window, hiding, 87 
suspending logging, 87 
verbose log messages, 86 
Macintosh, 16 
68030 Macs, 55 
68040 Macs, 55 
Apple Workgroup servers, 56 
AppleTalk, 18 
clones, 57-58 
Copland, 21 
DNS, 366 



EtherNet, 18 
FTP, 284 
MacHTTP, 18 
multitasking, 19 
origins, 54 

Power Macintosh, 18, 55-56 
scripts, 21 
security, 19 
servers, 16 
Unix, 62-64 
Apple Unix (A/UX), 63 
Linux, 63 
MachTen, 63 
when not to use, 20 
Macintosh Internet Daemon 
(MIND), 383 
Maejordomo, 339-346 
administration data, 340 
commands, 345-346 
creating mailing lists, 341-343 
installing, 339 
privileges, 343-345 
responses, editing, 346 
MacOS 

case sensitivity, 79 
Open Transport (OT), 61 
MacPerl, 216 

macros, BBEdit HTTML Tools, 478 
MacSite Searcher, 259 
MacTCP, 28, 72 
MaeWebLint, 485 
Mailer services 
ListSTAR, 352 
mailing lists, 337-338 
ListSTAR, 347-355 
addresses, 355 
Mailer services, 352 
services, 348 
Timer services, 349 
Maejordomo, 339-346 
administration data, 340 
commands, 345-346 
creating mailing lists, 341-343 
installing, 339 
privileges, 343-345 
responses, editing, 346 
spamming, 337 
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MAILTO tag, 489 
HTML, 166 

managed-access server model, 123 
managing content, 122-126 
marketing WWW, 433 
MAXLISTENS keyword, 
MacHTTP, 79 
MAXUSERS keyword, 

MacHTTP, 79 

Medium Access Control (MAC), 34 
Meeting Maker XP, 402-407 
memory 
RAM, 58 
RAM Doubler, 59 
WebSTAR, 95 
messages 
NetPrcsenz, 300 
Web Crossing, 417 
microprocessors 
68000-based, 74 
PowerPC, 74 

Microsoft Exchange, 11-12 
MIME (Multimedia Internet Mail 
Exchange), 70-72 
image/gif, 71 
MacHTTP 
suffix mapping, 81-82 
serving non-standard Mac files, 88 
text/html, 71 

MIND (Macintosh Internet 
Daemon), 383 
mirror sites 
FTP, 313 

miscellaneous settings 
(WebSTAR), 100 
models 

68030 Macs, 55 
68040 Macs, 55 
clones, 57-58 
Power Macintosh, 55-56 
modems 

14.4. 40 

28.8. 40 

copper phone wiring, 41 
ISP, 40 



PPP, 43 
SLIP, 43 

modular pages, 162 
mounting 
AppleShare volumes 
NetPrcsenz, 297 

MS Excel, HTML conversion, 130 
Multimedia Internet Mail Exchange 
(MIME), 70-72 
see also MIME 
multitasking 
cooperative, 19-20 
Macintosh, 19 
preemptive, 19-20 

N 

naming 
DNS, 367-371 
WWW sites, 445 
NAP (Network Access 
Providers), 39 
fractional T1 lines, 40 
T1 lines, 39 
T3 lines, 39 
navigating sites, 163 
NCSA, advertising servers, 446 
NetCloak, 220 

NetPresenz, 114, 118, 286-301 
AppleShare volumes, 297 
configuring, 295-297 
FTP folders, 288-289 
home folders, 292-293 
installing, 286 
logs, 299 
messages, 300 
privileges, 290-293 
remote commands, 297-300 
running in background, 296-297 
security, 293-295 
SIVC (Standard Internet Version 
Control), 296 
user access, 289-293 
user accounts, 287-289 
WWW access, 300 
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Netscape 

advertising servers, 446 
background color, 156 
blinking text, 489 
centering, 490 
client puli, 495 
color 

background) 492 
text) 492 

Communications page, 141 
copyright symbol, 491 
dynamic updating, 495 
enhancements, 486-504 
extensions, 140-142 
tablesy 151 
font sizing, 490 
frames, 498 
defining) 502 
linking) 502 
TARGET attribute) 503 
Frontier, 214 
horizontal rules, 487 
HTML 3.0, 487 
image attributes, 491 
ISINDEX tag, 487 
Java, 270 
Hotjava) 270 
JavaScript, 271 
line breaking, 490 
lists, 488 

MAILTO tag, 489 
plug-ins, 272-276 
architecture) 273-277 
QuickTime) 275 
RealAudiO) 265 
ShockWave) 274 
VRML) 267 
POPmail client, 334 
server pushes, 496-498 
tables, 493 

trademark symbol, 491 
WWW site, 141 

NetWings Internet Server, 118 
Network Access Providers 
(NAP), 39 
see also NAP 



network connection, 51 
Network Interface Cards (NICs), 38 
networks 
protocols, 26-35 
AppleTalk) 28 
MacTCP) 28 
Open Transport (OT), 29 
TCP) 27 
TCP/IP) 26 
wiring) 30-32 

newsgroups, advertising servers, 445 
NICs (Networks Interface Cards), 
38 

nodes, registering, 42 
not-for-profit servers, 435 
NotifyMail, 329 

o 

Object Database, Frontier, 203 
ODBC (Tango), 241 
offloading CGIs from server, 443 
older model servers, 49 
OneSite/Web HTTP Server, 118 
online documentation, 163 
Open Transport (OT), 29, 61 
System 7.5.3, 79 
opening Frontier, 201 
operating systems 
Copland, 21 
servers, 17 
Unix, 17 

Apple Unix (A/UX)) 63 
LintiX) 63 
MachTeU) 63 
Macintosh) 62-64 
security) 19 
server costS) 19 
ordered lists, 143 
organization pages, 167 
organizing directories, 127 
origins (Macintosh), 54 
OSAX (Open Scripting Architecture 
Extensions), 190 
OT (Open Transport), 61 
overriding Stay Open box, 197 
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packets (IP), 27 
PagcMUl, 462-469 
Attribute Inspector, 468 
creating documents, 463 
forms, 466 
links, 466 
Pasteboard, 468 
pages (WWW) 
cool links, 168 
modular, 162 
navigating, 163 
organizations, 167 
people, 167 
social calendars, 167 
set also WWW (World Wide Web) 
passwords 
AIMS, 328 

InterServer Publisher, 107 
WebSTAR, 98 
set also security 
Pasteboard (PageMill), 468 
paychecks, 423 
PCI (Peripheral Component 
Interconnect), 51, 61 
PDF (Portable Document Format), 
163, 263-265 
FTP, 313 

people pages, 167 
performance, MacHTTP, 80-81 
Peripheral Component Interconnect 
(PCI), 51, 61 
Perl, see MacPerl 
personal home pages, 452 
photographs, 161 
PIG_DELAY keyword, MacHTTP, 
80 

planning hardware needs, 52 
plug-ins 

architecture, 273-277 
Netscape, 272-276 
QuickTime, 275 
RealAudio, 265 



ShockWave, 274 
VRML, 267 

Point-to-Point Protocol (PPP), 43 
POP (Post-Office Protocol), 
320-321 
POPmail clients 
backups, 336 
Claris Emailer, 335 
Eudora, 333 
Eudora Lite, 334 
Netscape, 334 

PORT keyword, MacHTTP, 80 
portability (scripts), 221 
Portable Document Format (PDF), 
163, 263-265 
ports 

IP (Internet Protocol), 69 
InterServer PublisheVy lOS 
securityy 70 

POST method, CGIs, 179 
Post-Office Protocol (POP), 
320-321 

post-query scripts, 179 
PostScript documents, 313 
Power Macintosh, 18, 55-56 
PowerPC microprocessor, 74 
PPP (Point-to-Point Protocol), 43 
preemptive multitasking, 19-20 
privileges 

Maejordomo, 343-345 
NetPresenz, 290-293 
processing CGIs, 181 
programs, see applications 
protocols, 10, 26-35 
AppleTalk, 28 
email 

POP (Post-Office Protocol)y 320-321 
SMTP (Simple Mail Tranter 
Protocol) y 319-320 
FTP, 280-286 
anonymouSy 282-283 
archivesy 281 
emaily 283 
Internet Confi£y 285 
Macintoshy 284 
servicesy 283 
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HTTP (HyperText Transfer 
Protocol) 
connectionSy 69 

World Wide Web Consortiumy 70 
IP (Internet Protocol) 
addressesy 27 
packets, 27 
ports, 69 
MacTCP, 28 

MIME (Multimedia Internet Mail 
Exchange), 70-72 
imapfe/sif, 71 
text/htmly 71 

Open Transport (OT), 29 
PPP, 43 
SLIP, 43 
TCP, 27 
TCP/IP, 26 
wiring, 30-32 
lOBaseTy 31 
100BaseT, 31 

ATM (Asynchronous Transfer 
Mode), 32 

FDDI (Fiber Distributed Data 
Interface), 32 

Q 

Quarterdeck Mail, 322 
queries 
DNS 

iterative, 363-365 
recursive, 363-365 
Query Builder, Tango, 250 
query documents. Tango, 252 
quick scripts. Frontier, 202 
QuickDNS Pro, 371-382 
Admin application, 374-377 
installing, 371-373 
load balancing, 380 
resource records, 377-379 
creating, 379-380 
reverse domains, 380-382 
Unix DNS tables, 382 



QuickMail, 321-322 
QuickTime plug-in, 275 

R 

RAID, 61 
RAM, 58 
installing, 58 
RAM Doubler, 59 
RealAudio, 265-267 
REALM keyword, MacHTTP, 83 
realms 

InterServer Publisher, 108, 307-308 
WebSTAR, 97 

records, QuickDNS Pro, 377-379 
creating, 379-380 

recursive queries (DNS), 363-365 
reflector services (CU-SeeMe), 409 
registering 
DNS, 367-371 
nodes, 42 

relative URLs, 126 
remote access, 43 
ARA (Apple Remote Access), 44 
NetPresenz, 297-300 
PPP, 43 
SLIP, 43 
WebSTAR, 90 

Request for Comment (RFC) 
dociunents, 176 

resource records, QuickDNS Pro, 
377-380 

responses, Maqordomo, 346 
restrictions 
MacHTTP, 79 
WebSTAR, 97-98 
reverse domains, QuickDNS Pro, 
380-382 

RFC documents, 176 
ribs (segments), 37 
routers, 33 
bridges, 34 
number of, 35 
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routing AIMS, 330 

run-only scripts (AppleScript), 188 

RushHour (graphics), 443 

s 

sample scripts 
AppleScript, 191 
Frontier, 205, 210 
saving scripts, AppleScript, 187 
scalability, machines, 60 
scheduling, 402-407 
Meeting Maker XP, 402-407 
scripts 

APIs (Application Progamming 
Interfaces), 217 
AppleScript, 73, 184-200 
Apple Event Handler, 1 96 
closing scripts, 1 97 
creating scripts, 186 
forms, 196 
Frontier, 212 
HTTP 1,0 header, 195 
OSAX ( Open Scripting Architecture 
Extensions), 190 
run-only, 188 

running as application, 188 
sample script, 191 
saving, 187 
Script Editor, 185 
Stay Open box, 197 
text-only, 187 
C/C++, 216 
CGIs, 172 

compiled languages, 221 
executing, 181 
Frontier, 200 
AppleScript, 207, 212 
forms, 212 
framework, 208 
HTML headers, 211 
installing, 201 
Netscape, 214 
Object Database, 203 
opening, 201 



quick scripts, 202 
sample, 210 
samples, 205 
servers, 209 
HyperCard, 217 
imagemaps, 226 
interpreted languages, 221 
JavaScript, 271 
languages, 183-184 
libraries, 221 
MacHTTP, 76 
Macintosh, 20, 21 
MacPerl, 216 
portability, 221 
post-query scripts, 179 
processing, 181 

Server Side Includes (SSIs), 218 
Tango CGI, 248 
WebSTAR 
CGI scripts, 101 
searches 

document, 254-259 
AppleSearch, 259 
MacSite Searcher, 259 
TK-WWW, 254 
Tango, 251 

Web-crawling robots, 444 
security 
AIMS, 328 
groupware, 11 

InterServer Publisher, 106-109, 
304-308 

adding users, 107 
host access, 106 
IP ports, 105 
passwords, 107 
realms, 108, 307 
subnets, 106 
MacHTTP, 82-84 
folder access, 75 
Macintosh, 19 
NetPresenz, 293-295 
ports, IP (Internet Protocol), 70 
SSL (Secure Sockets Layer), 102 
TCP/IP, 11 
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Unix, 19 
WebSTAR 
passwords, 98 
realms, 97 

restricting^ server access, 97-98 
WWW, 440 
segments, 37 

Seminar demo (Tango), 245 
Sequential Linker tool, HTML 
Grinder, 162 

Serial Line Internet Protocol 
(SLIP), 43 
serial numbers, 149 
HTML Grinder, 149 
WebSTAR, 94 
serial number tool, 100 
server pushes (Netscape), 496-498 
Server Side Includes (SSIs), 218 
servers 

advertising, 444 
ancillary service, 448 
cool site of the day, 447 
Internet Shoppin£f Mall, 447 
namin£f, 445 
NCSA, 446 
Netscape, 446 
news£froups, 445 
Shriek, Brad, 447 
underwriting other services, 447 
Usenet, 445 
Tahoo, 446 

Apple Workgroup, 56 
archives, 13 
bandwidth, 441 
bottlenecks, 50 
centralized-access model, 124 
CGIs, offloading, 443 
clients, 69 

connection speeds, 50 
corporate servers, 435 
directories, 126-129 
distributed -access model, 125 
DNS, 360-366 
caching, 365 

InterNIC Domain Name Registry, 
368, 370 



MacDNS, 382 
Macintodj, 366 
MIND (Macintosh Internet 
Daemon), 383 
name hierarchy, 361-363 
naming, 367-371 
queries, 363-365 
QuickDNSPro, 371-382 
secondary servers, 367 
registering, 367-371 
email 

commercial, 321-323 
get from first, 319-320 
SMTP (Simple Mail Tranter 
Protocol), 319-320 
Frontier, 209 
FTP, backbone, 37 
httpd4Mac, 114-117 
binary files, 117 
configuring, 115-117 
installing, 114 

InterServer Publisher, 301-311 
BinHex, 113 
FTP sharing folder, 31 1 
host access, 304-308 
idle connections, 105 
installing, 102, 301-302 
InterXTML, 113, 218 
logs, 109-111, 308-310 
MacBinary, 113 
More Web configuration, 104 
realms, 108, 307-308 
security, 106-109, 304-308 
Setup application, 104-106, 302-304 
Status Window, 112, 310 
users, 306-308 
Web Sharing folder, 112 
MacHTTP, 18, 73 
access logs, 84-86 
AppleScript, 75 
configuring, 76-84 
folder access, 75 
installing, 74-76 
refusing connections, 87 
requirements, 74 
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scriptSy 76 
securityy 82’84 

serving non-standard Maejiks, 87 
status windowy hidingy 87 
suspending loggingy 87 
verbose log messagesy 86 
Macintosh, 16 
Copland, 21 
multitasking, 19 
scripts, 21 
security, 19 
when not to use, 20 
mailing lists 
ListSTAR, 347-355 
Maejordomoy 339-346 
managed-access model, 123 
managing content, 122-126 
NetCloak, 220 
NetPresenz, 114 
NetWings Internet Server, 118 
not-for-profit servers, 435 
older models, 49 
OneSite/Web HTTP Server, 118 
operating systems, 17 
planning, 52 
Power Macintosh, 18 
QuickDNS Pro, 371-382 
Admin application, 374-377 
installing, 371-373 
load balancing, 380 
resource records, 377-380 
reverse domains, 380-382 
Unix DNS tables, 382 
Server Side Includes (SSIs), 218 
statistics, 133 
ServerStat Lite, 135 
WebStat, 133 
topologies, 442 
Unix, 17 
costs, 19 
security, 19 
uses, 13 
WebSTAR 
CGI scripts, 101 
configuring, 93 



file-sharing, 92 
histograms, 94 
installing, 89 
interface, 100 
logs, 98-100 
memory, 95 

miscellaneous settings, 100 
passwords, 98 
realms, 97 

restricting server access, 97-98 
serial number tool, 100 
serial numbers, 94 
server access parameters, 100 
Shotten, Chuck, 88 
suffix mapping, 95 
user-defined actions, 96 
WWW, backbone, 37 
ServerStat Lite, server statistics, 135 
ServerStat logs, 100 
services (ListSTAR), 348 
Mailer, 352 
Timer, 349 

Setup application (InterServer 
Publisher), 104-106 
shareware, see applications; editors 
(HTML) 

sharing setup, WebSTAR, 92 
ShockWave plug-in, 274 
Shotten, Chuck 
MacHTTP, 67 
WebSTAR, 88 
Shriek, Brad, advertising 
servers, 447 

SIMMs (Single-Inline-Memory- 
Modules), 58 

Simple Mail Transfer Protocol 
(SMTP), 319-320 
SiteMill, 166 
sites 

linking, 452 
naming, 445 

SIVC (Standard Internet Version 
Control), 296 
SLIP (Serial Line Internet 
Protocol), 43 
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SMNT (Structure Mount) 
commands, 297 
SMTP (Simple Mail Transfer 
Protocol), 319-320 
social calendars, 167 
software archives, 14, 425-426 
spamming mailing lists, 337 
speed 

bus speed, 51 
network connections, 51 
spreadsheets 

converting to HTML, 129 
Excely 130 

SQL (Structured Query Language) 
Butler SQL, 235, 237 
installing) 236 
interfaces, 240 
Tango, 235 
databases, 233 

SSIs (Server Side Includes), 218 
SSL (Secure Sockets Layer), 
WebSTAR/SSL, 102 
stale links, 167 
StarNine Mail, 102 
StarNine, WebSTAR 
statistics 
AIMS, 332 
servers, 133 
ServerStat Lite, 135 
WebStat, 133 
Status window 
InterServer Publisher, 112, 310 
MacHTTP, hiding, 87 
Stay Open box, overriding, 197 
stretched lists, 146 
Stuffit files, 312 
subnets, 43 

InterServer Publisher, 106 
suffix mapping 
default mapping, 82 
MacHTTP, 81-82 
serving non-standard Mac files, 87 
WebSTAR, 95 

support (for Intranet users), 166 
suspending logging (MacHTTP), 87 



synchronous CGIs, 181 
System 7.5, 73 
System 7.5.3, 79 
System 8, 21 

T 

T1 lines, 39 
fiactional, 40 
T3 lines, 39 
tables, 151-152 
aligning images, 152 
borders, 151 
HTML, converting from 
spreadsheets, 129 
Netscape, 493 
QuickDNS Pro 
Unix, 382 
tags 

<FRAMESET>, 500 
<META>, 495 
blink, 489 
centering, 490 
font sizing, 490 
frames, 498 
defining, 502 
linking, 502 
TARGET attribute, 503 
horizontal rules, 487 
image attributes, 491 
ISINDEX, 487 
line breaks, 490 
MAILTO, 489 
tables, 493 
Web Weaver, 460 
see also HTML; Netscape 
Tango, 241-254 
Automobile Classifieds, 242 
Buder SQL, 235 
installing, 236 
Query Builder, 250 
query documents, 252 
search results, 251 
Seminar demo, 245 
Tango Editor, 249 
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Tango CGI, 248 
Tango Editor, 249 
TARGET attribute, 503 
TCP (Transmission Control 
Protocol), 27 
TCP/IP, 26 
security, 1 1 

test files (ASen files), 312 
text color, 492 
text files (FTP), 311 
text-only scripts, 187 
text/html (MIME), 71 
timecards, 420-424 
forms, 421 
paychecks, 423 

TIMEOUT keyword, MacHTTP, 79 
Timer services, ListSTAR, 349 
topologies (servers), 442 
TR-WWW 
configuring, 255-259 
document searches, 254 
installing, 255-259 
trademark symbol, 491 
traffic, QuickDNS Pro, 380 
Transmission Control Protocol/ 
Internet Protocol 
see also TCP/IP 
tutorials (HTML), 178 



u 

underwriting services, 447 
Unix, 17 

Apple Unix (A/UX), 63 
Linux, 63 
MachTcn, 63 
Macintosh, 62-64 
security, 19 
server costs, 19 

Unix DNS tables (QuickDNS Pro), 
382 

unordered lists, 143 
updating 
server pushes, 496 
sites, 451 



upgrading, scalability, 60 
URLs 

absolute, 126 
relative, 126 

Usenet, advertising servers, 445 
user accounts (NetPresenz), 
287-289 

user-defined actions, WebSTAR, 96 
UserLand Frontier, see Frontier 
users 
AIMS 

addin£fy 327-329 
deleting, 327-329 
feedback, 451 

InterServer Publisher, 107, 306-308 
utilities, BBEdit HTML Tools, 482 

V 

vaUdators (HTML), 484-486 
Doctor HTML, 485 
MaeWebLint, 485 
variables 

AppleScript, initializing, 194 
CGIs, 181-183 

verbose log messages (MacHTTP), 
86 

videoconferencing, 9, 15, 407-414 
CU-SeeMe, 408-414 
browser helper application, 413 
hardware, 409 
reflector services, 409 
usin 0 , 410 

VRML (Virtual Reality Modeling 
Language), 267-268 

w 

Web Crossing (BBS), 414 
configuring, 415 
installing, 415 
messages, 417 

Web Sharing folder, InterServer 
Publisher, 112 
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Web Weaver, 456-461 
documents, 458 
tags, 460 

Web-crawling robots, 444 
WebMap, imagemaps, 224 
WebSTAR, 88-102, 118 
Admin, 90-93 
CGI scripts, 101 
configuring, 93 
file-sharing, 92 
histograms, 94 
installing, 89 
interface, 100 
logs, 98-100 
ServerStatj 100 
WebStaty 100 
memory, 95 

miscellaneous settings, 100 
passwords, 98 
realms, 97 
remote access, 90 
restricting server access, 97-98 
serial number tool, 100 
serial numbers, 94 
server access parameters, 100 
Shorten, Chuck, 88 
suffix mapping, 95 
user-defined actions, 96 
WebSTARBG, 102 
WebSTAR/SSL, 102 
WebStat 
logs, 100 

server statistics, 133 
wiring protocols, 30-32 
lOBascT, 31 
segments (bridging)^ 37 
100BaseT, 31 
NICsy 38 
NuBus cardsy 38 
ATM (Asynchronous Transfer 
Mode), 32 

FDDI (Fiber Distributed Data 
Interfiice), 32 

World Wide Web Consortium, 70 
WWW (World Wide Web) 

Apple sites, 72 
authoring, 73 
Internet services, 73 



content and presentation, 438 
corporate site, 436 
customers, 433 
forms, 9 

helper applications 
CU-SeeMe, 413 
HTTP 

connections, 69 

World Wide Web Consortium, 70 
httpd4Mac, 114-118 
binary files, 117 
configuring, 115-117 
installing, 114 
imagemaps, 221-227 
client-side, 227 
GIF, 223-227 
hotspots, 223-227 
JPEG, 223-227 
scripts, 226-227 
WebMap, 224-227 
writing to a file, 225-227 
InterServer Publisher, 102-113, 118, 
301-311 
BinHex, 113 
FTP sharing folder, 311 
host access, 304-308 
idle connections, 105 
installing, 102-103, 301-302 
InterXTML, 113, 218 
IP ports, 105 
logs, 109-110, 308-310 
MacBinary, 113 
More Web configuration, 104 
realms, 307-308 
security, 106-109, 304-308 
Setup application, 104-106, 302-304 
Status Window, 310 
Status window, 112 
users, 306-308 
Web Sharing folder, 112 
Java, 268-272 
MacHTTP, 67, 73 
access logs, 84-86 
AppleScript, 75 





538 



Building and Maintaining an Intranet with the Macintosh 



configuring, 76-84 
folder access, 75 
hardware, 74 
installing, 74-76 
refusing connections, 87 
scripts, 76 
security, 82-84 

serving non-standard Mac files, 87 
status window, hiding, 87 
suspending logging, 87 
verbose log messages, 86 
marketing, 433 

NetPresenz, 114, 118, 286-301 
Netscape 
plug-ins, 272-276 
pages 

cool links, 168 
modular, 162 
navigating, 163 
organizations, 167 
people, 167 
social calendars, 167 
PDF (Portable Document Format), 
263 

RealAudio, 265-267 
security, 440 
servers 

advertising, 444 
backbone, 37 
sites 



linking, 452 
naming, 445 
Netscape, 141 
updating, 451 
URLs 



absolute, 126 
relative, 126 

VRML (Virtual Reality Modeling 
Language), 267-268 
Web-crawling robots, 444 
WebSTAR, 88-102, 118 
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Yahoo 

advertising servers, 446 
icons, 155 
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Programming Starter Kit, FoxPro Machete: Hacking FoxPro far Macintosh, 2E, and 
The Tao of AppleScript: BMUGs Guide to Macintosh Scripting 2E. 



800-763-7438 
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Hoyden Books 201 West 103rd Street ♦ Indianapolis, Indiana 46290 USA 
Visit our Web page at http; //www.mcp.com/hayden/ 





ADOBE SYSTEMS INCORPORATED 
MINIMUM TERMS OF END USER AGREEMENTS 



1 Licensor grants Licensee a non-exclusive sublicense to use the Adobe software (“Software") and the related written 
materials (“Documentation”) provided by Adobe Systems Incorporated (“Adobe”) to Licensor as set forth below. Licensee 
may install and use the Software on one computer. 

2 The Software is owned by Adobe and its suppliers and its structure, organization, and code are the valuable trade secrets of 
Adobe and its suppliers. Licensee agrees not to modify, adapt, translate, reverse engineer, decompile, disassemble or 
otherwise attempt to discover the source code of the Software. Licensee agrees not to attempt to increase the functionality 
of the Software in any manner. Licensee agrees that any permitted copies of the Software shall contain the same copyright 
and other proprietary notices which appear on and in the Software. 

3 Except as stated above, this Agreement does not grant Licensee any right (whether by license, ownership or otherwise) in 
or to intellectual property with respect to the Software. 

4 Licensee will not export or re-export the Software Programs without the appropriate United States or foreign government 
licenses. 

5 Trademarks, if used by Licensee shall be used in accordance with accepted trademark practice, including identification of 
the trademark owner’s name. Trademarks can only be used to identify printed output produced by the Software. The use of 
any trademark as herein authorized does not give Licensee rights of ownership in that trademark. 

6 LICENSEE ACKNOWLEDGES THAT THE SOFTWARE IS A “TRY-OUT" VERSION OF AN ADOBE PRODUCT, CON- 
TAINING UMITED FUNCnONAUTY. ADOBE IS UCENSING THE SOFTWARE ON AN “AS-IS” BASIS, AND ADOBE 
AND ITS SUPPUERS MAKE NO WARRANTIES EXPRESSED OR IMPUED, INCLUDING, WITHOUT UMITATION, AS 
TO NON-INFRINGEMENT OF THIRD PARTY RIGHTS, MERCHANTABILITY, OR FITNESS FOR ANY PARTICULAR 
PURPOSE. IN NO EVENT WILL ADOBE OR ITS SUPPLIERS BE LIABLE TO UCENSEE FOR ANY CONSEQUENTIAL. 
INCIDENTAL OR SPECIAL DAMAGES. INCLUDING ANYLOST PROFITS OR LOST SAVINGS, EVEN IF REPRESENTA- 
TIVES OF SUCH PARTIES HAVE BEEN ADVISED OF THE POSSIBIUTYOF SUCH DAMAGES. OR FOR ANY CLAIM BY 
ANYTHIRD PARTY. 

IF A SHRINKWRAP LICENSEE IS USED [Some states or jurisdictions do not allow the exclusion or limitation of inciden- 
tal, consequential or special damages, so the above limitation or exclusion may not apply to Licensee. Also some states or 
jurisdictions do not allow the exclusion of implied warnuities or limitation on how long an implied warranty may last, so 
the above limitations may not apply to Licensee. To the extent permissible, 2 Uiy implied warranties are limited to ninety 
(90) days. This warranty gives Licensee specific legal rights. Licensee may have other rights which vary from state to state or 
jurisdiction to jurisdiction.] 

7 Notice to Government End Users: If this product is acquired under the terms of a: GSA contract: Use, reproduction or 
disclosure is subject to the restrictions set forth in the applicable ADP Schedule contract. DoD contract : Use, duplication or 
disclosure by the Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of 252.227-7013. Civilian 
a gency contract : Use, reproduction or disclosure is subject to 52.227-19 (a) through (d) and restrictions set forth in the 
accompanying end user agreement. Unpublished-rights reserved under the copyright laws of the United States. 
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Streamline workflow and 
communication within your company 



Building and Maintaining an Intranet with the Macintosh'' 
has all the information you need to turn a Macintosh into an 
Intranet server and serve PC, Mac. and UNIX® machines. It 
covers topics such as setting up your Intranet, choosing what 
content to provide, keeping out intruders, and providing 
optimal service in a hands-on style— enabling you to establish 
your Intranet as quickly as possible. 



The companion CD-ROM includes: 

• Limited versions of Tango/Butler, 

NetCloak and NetForms, Meeting Maker, 

AND MANY OTHER GREAT DEMOS TO HELP YOU EVALUATE 
WHAT WILL WORK BEST FOR YOUR INTRANET 




With Building and 
Maintaining an 
Intranet, you’ll... 

• Set up services such as video 
conferencing, Real Audio”*, 
message boards, employee 
scheduling, email. World Wide 
Web, ftp, and many more! 

• Find a simple, cost-effective 
solution to providing 
corporate information to 
company employees. 

• Learn how to open portions 
of your intranet site up to the 
Internet while keeping private 
information safe. 



• CGI EXAMPLES YOU CAN USE TO GET GREAT SERVICES 
UP AND RUNNING QUICKLY ^ 

• CGI DEVELOPMENT TOOLS SUCH AS MacPeRL, FRONTIER, 
AND OTHERS 



Tobin Anthony, PhD 
works as a spacecraft control 
systems engineer at NASA’s 
Goddard Space Flight Center 
in Greenbelt, MD. He has 
written extensively in the 
areas of the World Wide Web 



$50.00 USA / $68.95 CAN / £46.99 Net UK (inc of VAT) 



and CGI scripting. 



ISBN 1-56830-279-7 





Visit US on the Internet at: 
http://www.mcp.com/hayden 

Category: Macintosh internet 
Online/Communication 
User Level: Accomplished— Expert 
Covers: Intranets 



